CVE-2009-4356

Winamp

CVE-2009-3996

CVE-2009-3996 is a heap-based buffer overflow in the MikMod library used by libmikmod (and implicated by Winamp’s Module Decoder Plug‑in in older builds). Specifically, specially crafted Ultratracker/Impulse Tracker music files could overflow buffers, allowing arbitrary code execution or crashes ...

DEBIAN-CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

Heap overflow

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

CVE-2009-3997

Integer overflow in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57 might allow remote attackers to execute arbitrary code via an Oktalyzer file that triggers a heap-based buffer overflow...

Integer overflow

Integer overflow in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57 might allow remote attackers to execute arbitrary code via an Oktalyzer file that triggers a heap-based buffer overflow...

CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

CVE-2009-3995

Summary (CVE-2009-3995) : The issue arises from multiple heap-based buffer overflows in MikMod (libmikmod, loaders/load_it.c, possibly version 3.1.12) used by Impulse Tracker-compatible formats. Exploitation via specially crafted Impulse Tracker samples or instrument definitions could allow a rem...

CVE-2009-3997

The CVE-2009-3997 issue affects Winamp’s Module Decoder Plug‑in (IN_MOD.DLL). The vulnerability is a heap-based buffer overflow triggered by an Oktalyzer file, and it could allow remote code execution in Winamp builds prior to 5.57. Documented details consistently describe an integer/heap overflo...

CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

CVE-2009-3997

Integer overflow in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57 might allow remote attackers to execute arbitrary code via an Oktalyzer file that triggers a heap-based buffer overflow...

CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

Winamp JPEG和PNG整数溢出漏洞

Bugraq ID: 37387 Winamp是一款流行的媒体播放程序。 Winamp包含的"jpeg.w5s"和"png.w5s"过滤器处理媒体文件中的畸形的JPEG或PNG数据时存在整数溢出，构建恶意MP3诱使用户解析可导致以应用程序权限执行任意指令。 NullSoft Winamp 5.3.2 NullSoft Winamp 5.0 91 NullSoft Winamp 5.0 9 NullSoft Winamp 5.0 8c NullSoft Winamp 5.0 8 NullSoft Winamp 5.0 7 NullSoft Winamp 5.0 6 NullSoft...

CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

CVE-2009-3996

Heap-based buffer overflow in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file...

Winamp模块解码器插件多个缓冲区溢出漏洞

Bugraq ID: 37374 CVE ID：CVE-2009-3995 CVE-2009-3996 CVE-2009-3997 Winamp是一款流行的媒体播放程序。 Winamp包含多个安全漏洞，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 -模块解码器插件INMOD.DLL解析Oktalyzer文件时存在整数溢出，可导致基于堆的缓冲区溢出。 -模块解码器插件INMOD.DLL解析Impulse Tracker文件时存在多个边界错误，可导致基于堆的缓冲区溢出。 -模块解码器插件INMOD.DLL解析Ultratracker文件时存在多个边界错误，可导致基于堆的缓冲区溢出。...

VUPEN Security Research - Winamp PNG and JPEG Data Integer Overflow Vulnerabilities

VUPEN Security Research - Winamp PNG and JPEG Data Integer Overflow Vulnerabilities http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Winamp is a proprietary media player written by Nullsoft, now a subsidiary of AOL. It is skinnable, multi-format freeware/shareware fro...

Secunia Research: Winamp Ultratracker File Parsing Buffer Overflow

====================================================================== Secunia Research 17/12/2009 - Winamp Ultratracker File Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: Winamp Impulse Tracker Sample Parsing Buffer Overflow

====================================================================== Secunia Research 17/12/2009 - Winamp Impulse Tracker Sample Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...