vendor:
Winamp
by:
hdm, Faithless
7,5
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: Winamp
Affected Version From: Winamp 5.11
Affected Version To: Winamp 5.12
Patch Exists: NO
Related CWE: CVE-2006-0476
CPE: winamp
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2006
Winamp Playlist UNC Path Computer Name Overflow
This module exploits a vulnerability in the Winamp media player. This flaw is triggered when a audio file path is specified, inside a playlist, that consists of a UNC path with a long computer name. This module delivers the playlist via the browser. This module has only been successfully tested on Winamp 5.11 and 5.12.
Mitigation:
No known mitigation or remediation for this vulnerability
