CVE-2002-1176

Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file...

Foundstone Research Labs Advisory - Multiple Exploitable Buffer Overflows in Winamp (fwd)

---------------------------------------------------------------------- Foundstone Research Labs Advisory - FS2002-10 Advisory Name: Multiple Exploitable Buffer Overflows in Winamp Release Date: December 18, 2002 Application: Winamp 3.0 and Winamp 2.81 Platforms: Windows NT/2000/XP Severity: Remot...

Multiple WinAmp buffer overflow

Buffer overflow during ID3v2 tags processing...

CVE-2002-1028

Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cause a denial of service crash via long arguments...

IIL Advisory: Winamp 3 (1.0.0.488) XML parser buffer overflow vulnerability

Illegal Instruction Labs Advisory ------------------------------------------------------------------------ Advisory name: Winamp 3 1.0.0.488 XML parser buffer overflow vulnerability Application: Winamp 3 1.0.0.488 Homepage: www.winamp.com Impact: There is a buffer overflow inside XML parser DLL...

CVE-2002-1028

The CVE-2002-1028 incident affects the Oddsock Song Requester WinAmp plugin CGI programs, version 2.1. The issue is described as multiple buffer overflows that permit remote attackers to trigger a denial of service (crash) by supplying long arguments. The connected documents confirm the affected ...

CVE-2002-1028

Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cause a denial of service crash via long arguments...

RETRY : newly released winamp 3 fails to address serious "execution of arbitrary" code issue when combined with MSIE6

This one was missed by security focus . Lets try again -- jelmer ----- Original Message ----- From: "Jelmer" [email protected] To: [email protected] Sent: Sunday, August 11, 2002 1:28 AM Subject: newly released winamp 3 fails to address serious "execution of arbitrary" code issue...

WINAMP also allows execution of arbitrary code (probably a lot more programs aswell)

It would seem that I opened up a can of worms when i created my icq + msie advisory the other day Wich presented a new way to execute arbitrary code on a users machine winamp is equally vulnerable Winamps starts skin files with the extention wsz and the mime type interface/x-winamp-skin automatic...

Outpost24 Advisory: Oddsock PlaylistGenerator Multiple BufferOverlow vulnerability

Outpost24 Advisory www.outpost24.com Advisory Name: Oddsock PlaylistGenerator Multiple BufferOverlow vulnerability Release date: 15/07-02 Software : Song Requester Version : 2.1 Platform: Windows NT/XP/95/98/2000 Severity: DoS Vulnerability, that terminates Winamp, and restart Author: Lucas...

Oddsock Song Requester 2.1 WinAmp Plugin - Denial of Service

Oddsock Song Requester 2.1 WinAmp Plugin - Denial of Service source: https://www.securityfocus.com/bid/5248/info A vulnerability has been reported for Oddsock Song Requester 2.1. The vulnerability occurs when an attacker makes a request to 'request.cgi' using a long value for the 'listpos'...

Oddsock Song Requester 2.1 WinAmp Plugin - Denial of Service

source: https://www.securityfocus.com/bid/5248/info A vulnerability has been reported for Oddsock Song Requester 2.1. The vulnerability occurs when an attacker makes a request to 'request.cgi' using a long value for the 'listpos' parameter. It is possible to cause Song Requester and WinAmp to...

WinAmp autoupdate feature buffer overflow

Buffer overflow during www.winamp.com response parsing...

remote winamp 2.x exploit (all current versions)

2c79cbe14ac7d0b8472d3f129fa1df55 Security Advisory Nъmero Dos winamp has an option, enabled by default, which checks on startup for the latest version from www.winamp.com and will then notify the user of a possible upgrade via messagebox.. unfortunately, if it were to receive a huge response, the...

CVE-2002-0547

Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag...

CVE-2002-0546

Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID3v2 tag in an MP3 file...

Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow

Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow // source: https://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. ...

CVE-2002-0547

CVE-2002-0547: A buffer overflow in the Winamp mini-browser (Winamp 2.79 and earlier) can be triggered by a long string in the ID3v2 tag title field, allowing remote attackers to cause a crash (DoS) and potentially execute arbitrary code. The available documents confirm the affected software and ...

CVE-2002-0547

Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag...

CVE-2002-0284

Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname...