CVE-2004-0820

Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...

WinAmp => 5.04 XML Remote Code exec

hello.. security.nnov.ru team i just coded an exploit to the WinAmp = 5.04 XML Remote Code exec bug if you like.. check The exploit http://blackhat.tv/skinhead.tgz a readme http://blackhat.tv/skinhead/README a working sample http://blackhat.tv/skinhead/ let it go out to the wild! greetings Daniel...

winampExploit.txt

index.html ----------- Load.php --------- foo.wsz foo.zip ----------------- /frame/ /maki/ /shade/ /html/ /html/file.exe malicious file to execute /html/test.htm html to load the .exe /player/ /player/Thumbs.db /xml/ /xml/includes.xml /xml/player-normal.xml /xml/player.xml /skin.xml /html/test.ht...

Winamp <= 5.04 Skin File (.wsz) Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits ============================================================= Winamp Do not use Winamp ! back: http://inj3ct0r.com/sploits/186.rar index.html ----------- Load.php --------- foo.wsz foo.zip ----------------- /frame/ /maki/ /shade/ /html/...

Winamp &lt;= 5.04 Skin File (.wsz) Remote Code Execution Exploit

No description provided by source. This 0day exploit is known to be circulating in the wild There is no patch for this vulnerability - Do not use Winamp ! http://www.milw0rm.com/sploits/skinhead.rar 171 Ko index.html ----------- html head /head frameset rows=",1" framespacing="0" border="0"...

Winamp 5.04 - .wsz Skin File Remote Code Execution

Winamp 5.04 - .wsz Skin File Remote Code Execution This 0day exploit is known to be circulating in the wild There is no patch for this vulnerability - Do not use Winamp ! https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/418.rar skinhead.rar - 171 Ko index.html...

VulnCheck KEV: CVE-2004-0820

Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...

Winamp 5.04 - '.wsz' Skin File Remote Code Execution

This 0day exploit is known to be circulating in the wild There is no patch for this vulnerability - Do not use Winamp ! https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/418.rar skinhead.rar - 171 Ko index.html ----------- Load.php --------- foo.wsz foo.zip...

Winamp Fasttracker 2 Plug-in in_mod.dll Heap Overflow

Binary data 1222.prm...

Winamp MIDI Plugin Track Size Overflow

Binary data 1952.prm...

Winamp Malformed File Name Handling DoS

Binary data 1225.prm...

Winamp b4s File Handling Multiple Malformed Fields Overflow

Binary data 1223.prm...

Winamp < 5.05 .WSZ File Handling RCE

Binary data 2151.prm...

Winamp < 5.552 Buffer Overflow

Binary data 5031.prm...

NullSoft Winamp 2.4 5.0.4 - .wsz Remote Code Execution

NullSoft Winamp 2.4 5.0.4 - .wsz Remote Code Execution source: https://www.securityfocus.com/bid/11053/info A vulnerability in Winamp has been discovered that may permit remote attackers to execute arbitrary code on client computers through a malicious .WSZ Winamp skin file. This issue is current...

NullSoft Winamp 2.4 < 5.0.4 - '.wsz' Remote Code Execution

source: https://www.securityfocus.com/bid/11053/info A vulnerability in Winamp has been discovered that may permit remote attackers to execute arbitrary code on client computers through a malicious .WSZ Winamp skin file. This issue is currently being exploited in the wild. This vulnerability may ...

[VulnWatch] Nullsoft Winamp &#39;in_mod.dll&#39; Heap Overflow

NGSSoftware Insight Security Research Advisory Name: Nullsoft Winamp 'inmod.dll' Heap Overflow Systems Affected: Nullsoft Winamp versions 2.91 to 5.02 possibly older versions, although this is not confirmed Severity: High Risk Vendor URL: http://www.winamp.com/ Author: Peter Winter-Smith...

Winamp buffer overflow

inmod.dll .xm files parsing buffer overflow...

CVE-2003-1272

Multiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a .b4s file containing 1 a long playlist name or 2 a long path in a file: argument to the Playstring parameter...

CVE-2003-1274

Winamp 3.0 allows remote attackers to cause a denial of service crash via .b4s file with a file: argument to the Playstring parameter that contains MS-DOS device names such as aux...