CVE-2002-0284

Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname...

CVE-2002-0284

The CVE-2002-0284 entry affects Winamp versions 2.77 and 2.78. When opening a WMA file that requires a license, Winamp apparently sends the full path of the Temporary Internet Files directory to the web page processing the license, potentially allowing a malicious web server to obtain that pathna...

Mp3 file can execute code in Winamp [Sandblad advisory #5]

Sandblad advisory 5 - ---..---..---..---..---..---..---..---..---..---..---..---..---- Title: Mp3 file can execute code in Winamp. Date: 2002-04-26 Software: Nullsoft Winamp 2.79 Rating: High because mp3 files are widely trusted as safe. Impact: Specially crafted mp3 file can execute arbitrary...

Buffer overflow in Winamp

Buffer overflow on MP3 ID3v2 tag processing...

winamp and wma Song Licenses

When opening a wma file with winamp 2.77, 2.78 tested that requires a license to be installed, winamp opens the webpage where it obtains this license through some vb script code calling an active x object, witch it passes the url to itself in order for this page to provide a click-here-to-play ty...

Утечка информации в WinAmp (information leakage)

При запросе лицензии на сервер передается информация о расположении временных файлов...

CVE-2001-0490

Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file...

CVE-2001-0490

Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file...

CVE-2001-0490

The CVE-2001-0490 entry concerns WINAMP 2.6x and 2.7x. A vulnerability exists in the AIP file handling that can cause a buffer overflow when processing a long string in an AIP file, allowing potential arbitrary code execution. The available documents identify the affected product and the input-ba...

переполнение буфера в WinAmp

Переполнение буфера в файлах .M3U при длинном параметре EXTINF:. .M3U-Файлы загружаются в браузерах без запроса пользователей. Кроме того, переполнение буфера при разборе .AIP файлов...

Re: Winamp 2.6x / 2.7x buffer overflow

Winamp 2.74 doesnt seem to be affected by the bug although I thought it would be, only 2.60 - 2.73 are affected, the AIP file format is some format invented by AudioSoft to provide a legal way to get MP3's from the net. AIP files or AudioSoft parameter files seem to contain weakly encrypted...

Winamp 2.73 buffer overflow

I recently found a buffer overflow in Winamp 2.73, it's in the way it parses .AIP files... These files are set to download without a download confirmation, like m3u & pls, so they pose a security threat... actually such exploits make winamp a backdoor A demonstration of how the EIP can be snatche...

NullSoft Winamp 2.x - AIP Buffer Overflow

// source: https://www.securityfocus.com/bid/2680/info Winamp is a popular media player supporting MP3 and other filetypes. Versions of Winamp are vulnerable to a buffer overflow condition triggered during processing of Audiosoft parameter files .AIP. A user may insert a large sequence of...

NullSoft Winamp 2.x - AIP Buffer Overflow

NullSoft Winamp 2.x - AIP Buffer Overflow // source: https://www.securityfocus.com/bid/2680/info Winamp is a popular media player supporting MP3 and other filetypes. Versions of Winamp are vulnerable to a buffer overflow condition triggered during processing of Audiosoft parameter files .AIP. A...

Shoutcast Server Buffer Crashes Server

The following information is being released by PA Networks to expose a potential problem with the Shoutcast server for Linux version v1.7.1 for Shoutcast Distributed Network Audio Server. During testing of new streams the following was discovered. Software Needed To Perform This Overflow: Winamp...

NullSoft Winamp 2.64 - '.m3u' Playlist Buffer Overflow

source: https://www.securityfocus.com/bid/1496/info The M3U Playlist file parser in NullSoft Winamp does not perform proper bounds checking with the extension "EXTINF:". Therefore, entering a string consisting of over 280 characters in conjunction with this parameter will cause a buffer overflow...

NullSoft Winamp 2.64 - .m3u Playlist Buffer Overflow

NullSoft Winamp 2.64 - .m3u Playlist Buffer Overflow source: https://www.securityfocus.com/bid/1496/info The M3U Playlist file parser in NullSoft Winamp does not perform proper bounds checking with the extension "EXTINF:". Therefore, entering a string consisting of over 280 characters in...

CVE-2000-0624

CVE-2000-0624 describes a buffer overflow in Winamp 2.64 and earlier that can be triggered by a long #EXTINF: extension in an M3U playlist, potentially allowing a remote attacker to execute arbitrary commands. The initial reports do not provide additional technical specifics beyond this descripti...

CVE-2000-0624

Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long EXTINF: extension in the M3U playlist...

winamp.m3u.txt

This is a multi-part message in MIME format. ------=NextPart000649274c$21af Content-Type: text/plain; format=flowed LEGAL NOTICE: By reading this you do agree that life does not make sense and it doesn't need to. You also agree to wear a condom. You do agree to think about nature. .. umm you also...