CVE-2003-1272

Multiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a .b4s file containing 1 a long playlist name or 2 a long path in a file: argument to the Playstring parameter...

CVE-2003-0765

The INMIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value...

CVE-2003-0765

The CVE-2003-0765 entry affects the IN_MIDI.DLL plugin (version 3.01 and earlier) used by Winamp 2.91. According to the description, a remote attacker could execute arbitrary code by feeding a MIDI file containing a large Track data size value. The connected documents confirm Winamp/IN_MIDI.DLL a...

CVE-2003-0765

The INMIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value...

WinAmp buffer overflow

Buffer overflow on MIDI files parsing...

Winamp 2.91 lets code execution through MIDI files

Luigi Auriemma Application: Winamp http://www.winamp.com and http://classic.winamp.com Versions: Winamp 2.91 using INMIDI.DLL 3.01 Winamp 3 crashes but I have not found methods to execute code Platforms: Windows Bugs: Code execution through malformed MIDI files Risk: medium/high exploitation has...

NullSoft Winamp 2.812.913.03.1 - MIDI Plugin IN_MIDI.dll Track Data Size Buffer Overflow (PoC)

NullSoft Winamp 2.812.913.03.1 - MIDI Plugin INMIDI.dll Track Data Size Buffer Overflow PoC source: https://www.securityfocus.com/bid/8567/info Winamp MIDI plugin, INMIDI.DLL has been reported prone to a buffer overflow issue when handling malicious MIDI files. The issue presents itself when a...

NullSoft Winamp 2.81/2.91/3.0/3.1 - MIDI Plugin 'IN_MIDI.dll' Track Data Size Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/8567/info Winamp MIDI plugin, INMIDI.DLL has been reported prone to a buffer overflow issue when handling malicious MIDI files. The issue presents itself when a malicious value is passed as the Track Data Size of a malicious MIDI file header. Although...

Winamp < 3.0b Multiple File Handling DoS

The remote host is using Winamp3, a popular media player which handles many files format mp3, wavs and more... This version suffers from multiple buffer overflow and denial of service issues that can be triggered by specially crafted b4s files. To perform an attack, the attack would have to send ...

CVE-2002-1524

Buffer overflow in XML parser in wsabi.dll of Winamp 3 1.0.0.488 allows remote attackers to execute arbitrary code via a skin file .wal with a long include file tag...

WinAmp v.3.0: buffer overflow

Damage Hacking Group security advisory www.dhgroup.org Product: WinAmp v.3.0 final not beta : bld 488 Authors: NullSoft, Inc. www.winamp.com Vulnerable versions: up to v.3.0 Not vulnerable: all that doesn't support b4s-lists Vulnerability: buffer overflow & code execution...

WinAmp XML parser buffer overflow

Buffer overflow on .WAL files parsing...

CVE-2002-2195

Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response...

CVE-2002-2392

Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to 1 wsz and 2 wal files that contain embedded code...

CVE-2002-2412

Winamp 2.80 stores authentication credentials in plaintext in the 1 HTTP-AUTH and 2 winamp sections in winamp.ini, which allows local users to gain access to other accounts...

CVE-2002-1176

Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file...

CVE-2002-1177

Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to execute arbitrary code via an MP3 file containing a long 1 Artist or 2 Album ID3v2 tag...

CVE-2002-1177

CVE-2002-1177 maps to multiple buffer overflows in Winamp 3.0, specifically in the Media Library handling of ID3v2 tags. The vulnerability occurs when displaying an MP3 in the Media Library window, where long Artist or Album ID3v2 tags can cause memory corruption, enabling remote code execution. ...

CVE-2002-1176

This CVE concerns Winamp 2.81 (and Winamp 3.0) with buffer overflows in ID3v2 tag handling. A long Artist ID3v2 tag in an MP3 can cause a crash or allow remote code execution when loaded, per Foundstone advisory and NVD entry. Winamp 2.81 and Winamp 3.0 contain the overflow in the Artist field of...

CVE-2002-1177

Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to execute arbitrary code via an MP3 file containing a long 1 Artist or 2 Album ID3v2 tag...