BID:12245

Nullsoft Winamp Multiple Unspecified Vulnerabilities

Info

Nullsoft Winamp Multiple Unspecified Vulnerabilities

Bugtraq ID:	12245
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jan 12 2005 12:00AM
Updated:	Jan 12 2005 12:00AM
Credit:	The individual or individuals responsible for the discovery of this issue are currently unknown; the vendor disclosed this issue.
Vulnerable:	NullSoft Winamp 5.0 8 NullSoft Winamp 5.0 7 NullSoft Winamp 5.0 6 NullSoft Winamp 5.0 5 NullSoft Winamp 5.0 4 NullSoft Winamp 5.0 3 NullSoft Winamp 5.0 2 NullSoft Winamp 5.0 1

Not Vulnerable:	NullSoft Winamp 5.0 8c

Discussion

Nullsoft Winamp Multiple Unspecified Vulnerabilities

Winamp is a freely available media player from Nullsoft. It is available for the Microsoft Windows platform.

Multiple unspecified vulnerabilities affect Nullsoft's Winamp. The underlying causes of most of these issues are unknown, however one of the issues is due to a buffer overflow.

Further information surrounding these issues is not available. This BID will be updated immediately upon the release of more details.

It is likely that a remote attacker may leverage these issues by distributing malicious files and enticing unsuspecting users to process them. This may facilitate privilege escalation and unauthorized access.

Exploit / POC

Nullsoft Winamp Multiple Unspecified Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Nullsoft Winamp Multiple Unspecified Vulnerabilities

Solution:
The vendor has released an upgrade dealing with these issues.

NullSoft Winamp 5.0 1