889 matches found
WinAmp contains a flaw in metadata handling in .mpa and .mp4 files
Overview WinAmp contains a flaw which may allow an attacker to crash WinAmp remotely via .mpa or .mp4 files. Description Nullsoft's WinAmp Player, a popular multimedia system for Microsoft Windows, contains a flaw in the handling of the metadata called "tags" contained within .mpa and .mp4 files...
CVE-2004-1396
Winamp 5.07 (and possibly other versions) is vulnerable to remote denial of service by processing malformed media files: (1) an mp4/m4a playlist with invalid tag data, or (2) an invalid .nsv/.nsa file. This can cause the application to crash or exhibit high CPU usage. No remediation details are p...
CVE-2004-1396
Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service application crash or CPU consumption via 1 an mp4 or m4a playlist file that contains invalid tag data or 2 an invalid .nsv or .nsa file...
CVE-2004-1150
Winamp is affected by a stack-based buffer overflow in the in_cdda.dll plugin (affected versions: 5.0 through 5.08c). The flaw is triggered when processing cda:// URLs that include an over-long device name or track number, e.g., via crafted m3u/pls playlists. Exploitation enables arbitrary code e...
CVE-2004-1150
Stack-based buffer overflow in the incdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long 1 device name or 2 sound track number, as demonstrated with a .m3u or .pls playlist file...
WinAmp media player buffer overflow
INCDDA.dll stack overflow...
NSFOCUS SA2005-01 : Buffer Overflow in WinAMP in_cdda.dll CDA Device Name
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2005-01 Topic: Buffer Overflow in WinAMP incdda.dll CDA Device Name Release Date: 2005-01-27 CVE CAN ID: CAN-2004-1150 http://www.nsfocus.com/english/homepage/research/0501.htm Affected systems & software...
Nullsoft Winamp < 5.0.8c IN_CDDA.dll Library Remote Overflow
Binary data 2563.prm...
NullSoft Winamp 5.0.x - Variant IN_CDDA.dll Remote Buffer Overflow (PoC)
NullSoft Winamp 5.0.x - Variant INCDDA.dll Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/12381/info A remote buffer overflow vulnerability affects the INCDDA.dll library of Nullsoft's Winamp. This issue is due to a failure of the application to properly validate the length ...
NullSoft Winamp 5.0.x - Variant 'IN_CDDA.dll' Remote Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/12381/info A remote buffer overflow vulnerability affects the INCDDA.dll library of Nullsoft's Winamp. This issue is due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into finite process...
Winamp < 5.0.5 Skin File (.WSZ) Local Zone Arbitrary Code Execution
The remote host is using Winamp, a popular media player which handles many files format mp3, wavs and more... The remote version of this software is vulnerable to a code execution flaw when processing a malformed .WSZ Winamp Skin file. An attacker may exploit this flaw by sending a malformed .wsz...
Winamp < 5.03 Filename Handler Local Buffer Overflow
The remote host is using Winamp, a popular media player that handles many files format mp3, wavs and more.... The remote version of this software is vulnerable to a local buffer overrun when handling a large file name. This buffer overflow may be exploited to execute arbitrary code on the remote...
Winamp < 5.0.8c Multiple Unspecified Vulnerabilities
The version of Winamp installed on the remote host has various unspecified vulnerabilities that may allow an attacker to execute arbitrary code on the remote host. An attacker may exploit these flaws by sending malformed files to a victim on the remote host. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2004-1119
Stack-based buffer overflow in INCDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file...
CVE-2004-2384
NullSoft Winamp 5.02 allows remote attackers to cause a denial of service crash by creating a file with a long filename, which causes the victim's player to crash when the file is opened from the command line...
CVE-2004-1896
Heap-based buffer overflow in inmod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 .xm mod media file...
CVE-2004-1396
Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service application crash or CPU consumption via 1 an mp4 or m4a playlist file that contains invalid tag data or 2 an invalid .nsv or .nsa file...
CVE-2004-1150
Stack-based buffer overflow in the incdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long 1 device name or 2 sound track number, as demonstrated with a .m3u or .pls playlist file...
Multiple WinAmp memory corruptions
Multiple memory corruptions...
Winamp 5.07 (latest version) Remote Crash + other stupid shizle
Winamp 5.07 latest version Remote Crash. + vuln to cause 100 cpu usage. 13/12/04 I. BACKGROUND Winamp is a very popular windows audio and video player. It also has alot of other features and is used by millions of people across the world. II. DESCRIPTION VULN 1. There is a vuln in winamp's handli...