CVE-2010-3137

Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wnaspi32.dll that is located in the same folder as a .669, .aac, .aiff, .amf...

Design/Logic Flaw

Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wnaspi32.dll that is located in the same folder as a .669, .aac, .aiff, .amf...

CVE-2010-3137

Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wnaspi32.dll that is located in the same folder as a .669, .aac, .aiff, .amf...

CVE-2010-3137

CVE-2010-3137 targets Winamp 5.581 (and potentially other versions) via an untrusted search path: a Trojan wnaspi32.dll placed in the same folder as specific media files (.669, .aac, .aiff, .amf, .au, .avr, .b4s, .caf, .cda) can enable DLL hijacking and arbitrary code execution. The connected Ope...

Nullsoft Winamp 5.581 (wnaspi32.dll) DLL Hijacking Exploit

Summary Winamp is a media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL. It is proprietary freeware/shareware, multi-format, extensible with plug-ins and skins, and is noted for its graphical sound visualization, playlist, and media library features. Description Winam...

Nullsoft Winamp 5.581 DLL Hijacking Exploit

/ Nullsoft Winamp 5.581 wnaspi32.dll DLL Hijacking Exploit Vendor: Nullsoft. Product Web Page: http://www.winamp.com Affected Version: 5.581 x86 Summary: Winamp is a media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL. It is proprietary freeware/shareware, multi-forma...

Nullsoft Winamp 5.581 DLL Hijacking Exploit (wnaspi32.dll)

Exploit for windows platform in category local exploits ========================================================== Nullsoft Winamp 5.581 DLL Hijacking Exploit wnaspi32.dll ========================================================== / Nullsoft Winamp 5.581 wnaspi32.dll DLL Hijacking Exploit Vendor:...

NullSoft Winamp 5.581 - wnaspi32.dll DLL Hijacking

NullSoft Winamp 5.581 - wnaspi32.dll DLL Hijacking / Nullsoft Winamp 5.581 wnaspi32.dll DLL Hijacking Exploit Vendor: Nullsoft. Product Web Page: http://www.winamp.com Affected Version: 5.581 x86 Summary: Winamp is a media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL...

NullSoft Winamp 5.581 - 'wnaspi32.dll' DLL Hijacking

/ Nullsoft Winamp 5.581 wnaspi32.dll DLL Hijacking Exploit Vendor: Nullsoft. Product Web Page: http://www.winamp.com Affected Version: 5.581 x86 Summary: Winamp is a media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL. It is proprietary freeware/shareware, multi-forma...

Winamp VP6内容解析栈溢出漏洞

BUGTRAQ ID: 41591 Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp的vp6.w5s组件在解析畸形的Flash Video数据时存在栈溢出漏洞，用户受骗打开了特制的FLV文件就会导致执行任意代码。 Nullsoft Winamp 5.x 厂商补丁： Nullsoft -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.winamp.com/help/VersionHistoryWinamp5.58...

WinAmp buffer overflows

Multiple buffer overflows on .flw files parsing...

VUPEN Security Research - Winamp Player FLV Data Processing Multiple Overflow Vulnerabilities

VUPEN Security Research - Winamp Player FLV Data Processing Multiple Overflow Vulnerabilities http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Winamp is a proprietary media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL. It is...

Winamp < 5.58 Buffer Overflow

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.58. Such versions are reportedly affected by a stack-based buffer overflow vulnerability when parsing VP6 video content. An attacker, exploiting this flaw, can execu...

Winamp < 5.58 Multiple Vulnerabilities

Binary data 5597.prm...

Winamp v5.571 Malicious AVI Denial of Service

No description provided by source. Tested on Windows 7 and Winamp v5.571x86 This bug is informed to Nullsoft and was fixed long back. The status can be found at http://forums.winamp.com/showthread.php?s=&threadid=316000 This code works on Python 3.0. To make it work on 3.0 remove braces in print...

Winamp 5.572 Buffer Overflow

!/usr/bin/python Exploit Title: Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass Date: June 26, 2010 Author: Node Software Link: http://download.nullsoft.com/winamp/client/winamp5572fullemusic-7plusen-us.exe Tested on: Windows 7 Ultimate x64 ENG Badchars: '\x00\xff\x5c\x2f\x0a\x0d\x20'...

Winamp 5.571 - .avi Denial of Service

Winamp 5.571 - .avi Denial of Service Tested on Windows 7 and Winamp v5.571x86 This bug is informed to Nullsoft and was fixed long back. The status can be found at http://forums.winamp.com/showthread.php?s=&threadid=316000 This code works on Python 3.0. To make it work on 3.0 remove braces in pri...

Winamp v5.571 Malicious AVI Denial of Service

Exploit for windows platform in category dos / poc ============================================= Winamp v5.571 Malicious AVI Denial of Service ============================================= Tested on Windows 7 and Winamp v5.571x86 This bug is informed to Nullsoft and was fixed long back. The statu...

Winamp 5.571 - '.avi' Denial of Service

Tested on Windows 7 and Winamp v5.571x86 This bug is informed to Nullsoft and was fixed long back. The status can be found at http://forums.winamp.com/showthread.php?s=&threadid=316000 This code works on Python 3.0. To make it work on 3.0 remove braces in print print"\nWinamp v5.571 malicious AVI...

Winamp v5.572 Local BoF Exploit (Win7 ASLR and DEP Bypass)

No description provided by source. !/usr/bin/python Exploit Title: Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass Date: June 26, 2010 Author: Node Software Link: http://download.nullsoft.com/winamp/client/winamp5572fullemusic-7plusen-us.exe Tested on: Windows 7 Ultimate x64 ENG Badchars...