vendor:
Winamp
by:
MC
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Winamp
Affected Version From: 5.24
Affected Version To: 5.24
Patch Exists: NO
Related CWE: CVE-2008-0065
CPE: a:nullsoft:winamp:5.24
Platforms Tested: Windows
2008
Winamp Ultravox Streaming Metadata (in_mp3.dll) Buffer Overflow
This module exploits a stack buffer overflow in Winamp 5.24. By sending an overly long artist tag, a remote attacker may be able to execute arbitrary code. This vulnerability can be exploited from the browser or the winamp client itself.
Mitigation:
Apply the latest patch from the vendor