vendor:
Winamp
by:
[ByteRage]
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Winamp
Affected Version From: Winamp versions prior to 2.7x
Affected Version To: Winamp versions prior to 2.7x
Patch Exists: NO
Related CWE: CVE-2001-0361
CPE: a:nullsoft:winamp
Platforms Tested:
Unknown
Buffer Overflow in Winamp Media Player
Winamp versions prior to 2.7x are vulnerable to a buffer overflow when processing Audiosoft parameter files (*.AIP). An attacker can insert a large sequence of characters into an *.AIP file, causing a stack overflow. This allows the attacker to overwrite critical parts of the stack frame and potentially execute arbitrary code on a vulnerable system.
Mitigation:
Upgrade to a patched version of Winamp.