Nullsoft Winamp Malformed Playlist File WMA Extention Remote Buffer Overflow Vulnerability

Bugtraq ID:	16462
Class:	Boundary Condition Error
CVE:	CVE-2005-3188
Remote:	Yes
Local:	No
Published:	Feb 01 2006 12:00AM
Updated:	Feb 07 2006 08:55PM
Credit:	This issue was discovered by Alan Mccaig (b0f) <[email protected]>.
Vulnerable:	NullSoft Winamp 5.094
Not Vulnerable:	NullSoft Winamp 5.13

Nullsoft Winamp Malformed Playlist File WMA Extention Remote Buffer Overflow Vulnerability

Winamp is susceptible to a buffer-overflow vulnerability when handling specially crafted playlist files.
An attacker may exploit this issue to gain unauthorized access to a computer with the privileges of the user that activated the vulnerable application.

Winamp version 5.094 is reported susceptible to this issue; other versions may also be affected.

This issue is similar to the one described in BID 16410 (Nullsoft Winamp Malformed Playlist File Handling Remote Buffer Overflow Vulnerability), but they likely exist in differing code paths in the application.

Nullsoft Winamp Malformed Playlist File WMA Extention Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Nullsoft Winamp Malformed Playlist File WMA Extention Remote Buffer Overflow Vulnerability

Solution:
This issue has reportedly been silently fixed in version 5.13 of Winamp.

Nullsoft Winamp Malformed Playlist File WMA Extention Remote Buffer Overflow Vulnerability

References:

• Winamp Home Page (NullSoft)
  
• iDefense Security Advisory 02.01.06: Winamp m3u/pls .WMA Extension Buffer Overfl ("[email protected]" )