header-logo
Suggest Exploit
vendor:
Winamp
by:
[ByteRage]
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Winamp
Affected Version From: Winamp versions prior to 2.7x
Affected Version To: Winamp versions prior to 2.7x
Patch Exists: NO
Related CWE: CVE-2001-0361
CPE: a:nullsoft:winamp
Other Scripts:
Platforms Tested:
Unknown

Buffer Overflow in Winamp Media Player

Winamp versions prior to 2.7x are vulnerable to a buffer overflow when processing Audiosoft parameter files (*.AIP). An attacker can insert a large sequence of characters into an *.AIP file, causing a stack overflow. This allows the attacker to overwrite critical parts of the stack frame and potentially execute arbitrary code on a vulnerable system.

Mitigation:

Upgrade to a patched version of Winamp.
Source

Exploit-DB raw data: