Winamp IN_Mod.DLL Plugin Remote Code Execution Vulnerability

Bugtraq ID:	23350
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 06 2007 12:00AM
Updated:	Apr 09 2007 09:12PM
Credit:	Piotr Bania is credited with the discovery of this issue.
Vulnerable:	NullSoft Winamp 5.33
Not Vulnerable:

Winamp IN_Mod.DLL Plugin Remote Code Execution Vulnerability

The IN_MOD.DLL plugin for Winamp is prone to a remote code-execution issue because it fails to handle malformed files.

An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application.

IN_MOD.DLL 5.33 is vulnerable; other versions may also be affected.

Winamp IN_Mod.DLL Plugin Remote Code Execution Vulnerability

To exploit this issue, an attacker must entice an unsuspecting victim to use the affected application to open a specially crafted file.

Winamp IN_Mod.DLL Plugin Remote Code Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Winamp IN_Mod.DLL Plugin Remote Code Execution Vulnerability

References:

• Winamp Home Page (NullSoft)
  
• AOL Nullsoft Winamp IT Module "IN_MOD.DLL" Remote Heap Memory Corruption (Piotr Bania)
  
• AOL Nullsoft Winamp S3M Module "IN_MOD.DLL" Remote Heap Memory Corruption (Piotr Bania)