889 matches found
Stack overflow
Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file...
CVE-2006-0720
Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file...
CVE-2006-0720
Winamp 5.12/5.13 are affected by a stack-based buffer overflow in .m3u handling. The vulnerability stems from an incorrect strncpy call when pausing or stopping playback, leading to a denial of service and potential arbitrary code execution. Public PoCs/exploits exist for Winamp 5.12 (.m3u) and a...
CVE-2006-0720
Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file...
Winamp < 5.14 .M3U File Handling Buffer Overflow
Binary data 3445.prm...
[Full-disclosure] Winamp .m3u fun again ;)
Winamp .m3u Remote Buffer Overflow Vulnerability 0day by Sowhat Discovery: 2005.07.21 Pubulished: 2006.02.16 http://secway.org/advisory/AD20060216.txt Affected: Winamp All versions including 5.13 Overview: WinAMP is a popular media player that supports various media and playlist formats, includin...
Buffer overflow
Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via 1 an m3u file containing a long URL ending in .wma, 2 a pls file containing a File1 field with a long URL ending in .wma, or 3 an m3u file with a long filename, variants of...
CVE-2006-0708
Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via 1 an m3u file containing a long URL ending in .wma, 2 a pls file containing a File1 field with a long URL ending in .wma, or 3 an m3u file with a long filename, variants of...
CVE-2006-0708
CVE-2006-0708 describes multiple buffer overflows in Nullsoft Winamp 5.13 and earlier that allow remote code execution via crafted playlists (.m3u/.pls) with long URLs or filenames ending in .wma. Connected docs confirm related variants (CVE-2005-3188, CVE-2006-0476) and publicly available exploi...
CVE-2006-0708
Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via 1 an m3u file containing a long URL ending in .wma, 2 a pls file containing a File1 field with a long URL ending in .wma, or 3 an m3u file with a long filename, variants of...
New winamp m3u/pls .WMA & .M3U Extension overflows
This is an update on. http://idefense.com/intelligence/vulnerabilities/display.php?id=378 and also a new overflow with .m3u This overflow is still present in the latest version of winamp 5.13 with a little bit of modifcation. FIRST VULN ========== like so.. Example m3U file format: EXTM3U...
CVE-2005-3188
CVE-2005-3188 corresponds to a buffer overflow in Nullsoft Winamp 5.094, triggered by crafted playlist references in m3u or pls files (long lines ending in .wma). The issue enables remote code execution due to inadequate input sanitization during playlist processing. Relatedly, CVE-2006-0476 cove...
CVE-2005-3188
Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via 1 an m3u file containing a long line ending in .wma or 2 a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476...
iDefense Security Advisory 02.01.06: Winamp m3u/pls .WMA Extension Buffer Overflow Vulnerability
Winamp m3u/pls .WMA Extension Buffer Overflow Vulnerability iDefense Security Advisory 02.01.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=378 February 1, 2006 I. BACKGROUND Winamp is a popular media player for Windows which supports many audio/video file formats. More...
US-CERT Technical Cyber Security Alert TA06-032A -- Winamp Playlist Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-032A Winamp Playlist Buffer Overflow Original release date: February 1, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows systems with Winamp 5.12 or earlier Overvi...
iDefense Security Advisory 02.01.06: Winamp m3u Parsing Stack Overflow Vulnerability
Winamp m3u Parsing Stack Overflow Vulnerability iDefense Security Advisory 02.01.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=377 February 1, 2006 I. BACKGROUND Winamp is a popular media player for Windows which supports many audio/video file formats. More information ca...
Immunity Canvas: VSPLOIT_WINAMP512
Name| vsploitwinamp512 ---|--- CVE| CVE-2006-0476 Exploit Pack| CANVAS Description| Winamp 5.12 .pls overflow Notes| CVE Name: CVE-2006-0476 VENDOR: Nullsoft Repeatability: References: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=377 CVE Url:...
Buffer overflow
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist pls file with a long file name File1 field...
CVE-2006-0476
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist pls file with a long file name File1 field...
CVE-2006-0476
Winamp 5.13 and earlier variants (notably 5.12) are affected by buffer-overflow flaws triggered by crafted playlist files (M3U/PLS) containing long URLs/filenames, enabling remote code execution. Connected sources document CVE-2006-0476 and related CVEs (e.g., CVE-2006-0708, CVE-2005-3188) descri...