Winamp < 5.31 Multiple Heap Overflows

Binary data 3800.prm...

Festalon Heap Corruption

Luigi Auriemma Application: Festalon http://projects.raphnet.net/festalon Versions: = 0.5.5 and = 0.5.0 Platforms: Windows, nix, BSD, Winamp and XMMS plugin Bug: heap corruption in FESTAHESLoad Exploitation: local Date: 06 Aug 2006 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.o...

Winamp Playlist UNC Path Computer Name Overflow

This module exploits a vulnerability in the Winamp media player. This flaw is triggered when an audio file path is specified, inside a playlist, that consists of a UNC path with a long computer name. This module delivers the playlist via the browser. This module has only been successfully tested ...

CVE-2006-3228

Buffer overflow in inmidi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid MIDI file...

CVE-2006-3228

Buffer overflow in inmidi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid MIDI file...

CVE-2006-3228

CVE-2006-3228 affects Winamp’s MIDI parsing in the in_midi.dll plugin. A buffer overflow can be triggered by a crafted MIDI file, enabling remote code execution according to NVD and Nessus-derived descriptions. Affected versions include Winamp 2.90 up to 5.23 (including 5.21). Exploitation is ach...

WinAMP buffer overflow

Buffer overflow on MIDI files playing...

Winamp < 5.24 in_midi.dll MIDI File Processing Overflow

The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host reportedly contains a buffer overflow in the MIDI plugin 'inmidi.dll' that can be exploited using a MIDI file with a specially crafted header to crash the affected...

Winamp 5.21 - .Midi File Header Handling Buffer Overflow (PoC)

Winamp 5.21 - .Midi File Header Handling Buffer Overflow PoC / Winamp 5.21 - Midi Buffer Overflow inmidi.dll PoC coded by: BassReFLeX Date: 19 Jun 2006 / include include include void usagechar file; char header = "\x4D\x54\x68\x64\x00\x00" "\x00\x06\x00\x00\x00\x01" "\x00\x60\x4D\x54\x72\x6B"...

Winamp < 5.22 Malformed Midi File Handling Buffer Overflow

The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host reportedly contains a buffer overflow in the 'inmidi.dll' library that can be exploited using a specially crafted MIDI file to either crash the affected application or...

Winamp <= 5.21 (Midi File Header Handling) Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================== Winamp include include void usagechar file; char header = "\x4D\x54\x68\x64\x00\x00" "\x00\x06\x00\x00\x00\x01" "\x00\x60\x4D\x54\x72\x6B" "\x00\x00"; char badc0de =...

Winamp 5.21 - '.Midi' File Header Handling Buffer Overflow (PoC)

/ Winamp 5.21 - Midi Buffer Overflow inmidi.dll PoC coded by: BassReFLeX Date: 19 Jun 2006 / include include include void usagechar file; char header = "\x4D\x54\x68\x64\x00\x00" "\x00\x06\x00\x00\x00\x01" "\x00\x60\x4D\x54\x72\x6B" "\x00\x00"; char badc0de = "\xFF\xFF\xFF\xFF\xFF\xFF"...

Winamp < 5.22 MIDI File Handling Overflow

Binary data 3658.prm...

SHOUTcast filename format string vulnerability

Added: 05/17/2006 CVE: CVE-2004-1373 BID: 12096 OSVDB: 12585 Background SHOUTcast is a streaming audio server based on Winamp. Problem A format string vulnerability in SHOUTcast allows remote attackers to execute commands by requesting a MP3 filename containing format string characters such as %n...

SHOUTcast filename format string vulnerability

Added: 05/17/2006 CVE: CVE-2004-1373 BID: 12096 OSVDB: 12585 Background SHOUTcast is a streaming audio server based on Winamp. Problem A format string vulnerability in SHOUTcast allows remote attackers to execute commands by requesting a MP3 filename containing format string characters such as %n...

SHOUTcast filename format string vulnerability

Added: 05/17/2006 CVE: CVE-2004-1373 BID: 12096 OSVDB: 12585 Background SHOUTcast is a streaming audio server based on Winamp. Problem A format string vulnerability in SHOUTcast allows remote attackers to execute commands by requesting a MP3 filename containing format string characters such as %n...

Winamp < 5.2 Multiple Vulnerabilities

The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host reportedly crashes if the user tries to open an M3U file with a long filename. In addition, it reportedly contains a buffer overflow flaw that can be exploited using a...

WinAmp player buffer overflow

Buffer overflow on oversized computer name in UNC path of .pls on .m3u file entry. Buffer overflow on oversized WMA playlist file entry. Vulnerability can be exploited for hidden trojan installation...

IRM 018: Winamp 5.13 m3u Playlist Buffer Overflow

IRM Security Advisory No. 018 Winamp 5.13 m3u Playlist Buffer Overflow Vulnerability Type / Importance: Unauthorised Code Execution / High Problem Discovered: February 17th 2006 Vendor Contacted: February 17th 2006 Advisory Published: February 24th 2006 Abstract: Nullsoft Winamp is a popular medi...

NSFOCUS SA2006-01 : Winamp m3u File Processing Buffer Overflow Vulnerability

NSFOCUS Security Advisory SA2006-01 Winamp m3u File Processing Buffer Overflow Vulnerability Release Date: 2006-02-23 CVE ID: CVE-2006-0720 http://www.nsfocus.com/english/homepage/research/0601.htm Affected systems & software =========================== Nullsoft Winamp 5.12 Nullsoft Winamp 5.13...