889 matches found
Winamp < 5.0.7 Multiple File Handling DoS
The remote host is using Winamp, a popular media player that handles many file formats mp3, wavs and more... The remote version of this software is vulnerable to denial of service attacks when it processes malformed .mp4 / .m4a or .nsv / .nsa files. An attacker may exploit this flaw by sending...
Nullsoft Winamp Large MP4 / M4A File Remote DoS
Binary data 2455.prm...
CVE-2004-1119
CVE-2004-1119 describes a stack-based buffer overflow in Winamp’s IN_CDDA.dll, triggered by parsing playlist files (notably .m3u) or CD audio references. Exploitation could allow remote arbitrary code execution on affected Winamp versions (e.g., 5.05/5.06; later found variants up to 5.07 in advis...
CVE-2004-1119
Stack-based buffer overflow in INCDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file...
Winamp <= 5.06 IN_CDDA.dll Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ========================================================= Winamp //File ops. //m3u File format //http://hanna.pyxidis.org/tech/m3u.html // Host info: // Name=ntdll system // File version=5.1.2600.1217 xpsp2.030429-213 //...
Winamp 5.06 - IN_CDDA.dll Remote Buffer Overflow
Winamp 5.06 - INCDDA.dll Remote Buffer Overflow / Credits go to the author How to fix and study the bug: - The cdda library only reserves 20 bytes for names when files are ".cda" - run Winamp with ollye - when loaded locate and break at: 10009BBB 8D4C24 20 LEA ECX,DWORD PTR SS:ESP+20 10009BBF 84C...
Winamp - Buffer Overflow In IN_CDDA.dll
======================================================================== = Winamp - Buffer Overflow In INCDDA.dll = = Vendor Update: = http://www.winamp.com/player/ = = Affected Software: = Winamp 5.05 only version tested = = Public disclosure on November 23, 2004...
Winamp 5.06 - 'IN_CDDA.dll' Remote Buffer Overflow
/ Credits go to the author How to fix and study the bug: - The cdda library only reserves 20 bytes for names when files are ".cda" - run Winamp with ollye - when loaded locate and break at: 10009BBB 8D4C24 20 LEA ECX,DWORD PTR SS:ESP+20 10009BBF 84C0 TEST AL,AL 10009BC1 74 0F JE SHORT...
Nullsoft Winamp < 5.0.7 IN_CDDA.dll Remote Buffer Overflow
Binary data 2426.prm...
Winamp < 5.07 IN_CDDA.dll m3u Playlist Processing Overflow
The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host has a buffer overflow that may allow an attacker to execute arbitrary code on the remote host subject to the privileges of the user running Winamp. To exploit this, an...
Winamp ActiveX Control Remote Buffer Overflow
Binary data 2258.prm...
NullSoft Winamp 2.x3.x5.0.x - ActiveX Control Remote Buffer Overflow
NullSoft Winamp 2.x3.x5.0.x - ActiveX Control Remote Buffer Overflow source: https://www.securityfocus.com/bid/11107/info Nullsoft Winamp ActiveX Control is alleged to be prone to a remote buffer overflow vulnerability. This issue presents itself in an ActiveX control installed by the application...
NullSoft Winamp 2.x/3.x/5.0.x - ActiveX Control Remote Buffer Overflow
source: https://www.securityfocus.com/bid/11107/info Nullsoft Winamp ActiveX Control is alleged to be prone to a remote buffer overflow vulnerability. This issue presents itself in an ActiveX control installed by the application. Reportedly, a malicious attacker can exploit this issue to execute...
CVE-2004-0820
Affected software: Winamp prior to 5.0.5. Vulnerability: remote code execution by parsing a malformed .WSZ (Winamp Skin) file; HTML/ scripts referenced from XML inside the WSZ are executed in the Local Computer Zone. Root cause: improper handling of skin XML/HTML references within WSZ, enabling a...
CVE-2004-0820
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...
EUVD-2002-1507
Buffer overflow in XML parser in wsabi.dll of Winamp 3 1.0.0.488 allows remote attackers to execute arbitrary code via a skin file .wal with a long include file tag...
CVE-2002-1524
Winamp 3 (version 1.0.0.488) is affected by a buffer overflow in the XML parser function wsabi.dll. An attacker can craft a skin file (.wal) containing a long include file tag to potentially execute arbitrary code on a remote system. The vulnerability is described as a buffer overflow in the XML ...
CVE-2002-0546
CVE-2002-0546: In the Winamp mini-browser (versions 2.78 and 2.79), the HTML/JS execution vulnerability is triggered by crafted ID3v1/ID3v2 tags in MP3 files, allowing remote script execution. The root cause is cross-site scripting within the mini-browser component when processing MP3 metadata. E...