Winamp Prior to 5.6 Multiple Vulnerabilities
BID:45097
Info
Winamp Prior to 5.6 Multiple Vulnerabilities
| Bugtraq ID: | 45097 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 30 2010 12:00AM |
| Updated: | Nov 30 2010 12:00AM |
| Credit: | Joakim @ nsense, C. Eiram, Secunia, Nullsoft |
| Vulnerable: |
NullSoft Winamp 5.5.8 NullSoft Winamp 5.3.2 NullSoft Winamp 5.59 buiild 3033 NullSoft Winamp 5.581 NullSoft Winamp 5.581 NullSoft Winamp 5.58 NullSoft Winamp 5.58 NullSoft Winamp 5.572 NullSoft Winamp 5.571 NullSoft Winamp 5.57 NullSoft Winamp 5.56 NullSoft Winamp 5.552 NullSoft Winamp 5.551 NullSoft Winamp 5.55 NullSoft Winamp 5.541 NullSoft Winamp 5.54 NullSoft Winamp 5.531 NullSoft Winamp 5.53 NullSoft Winamp 5.52 NullSoft Winamp 5.51 NullSoft Winamp 5.5 NullSoft Winamp 5.35 NullSoft Winamp 5.34a NullSoft Winamp 5.34 NullSoft Winamp 5.33 NullSoft Winamp 5.32 NullSoft Winamp 5.31 NullSoft Winamp 5.3 NullSoft Winamp 5.24 NullSoft Winamp 5.23 NullSoft Winamp 5.22 NullSoft Winamp 5.21 NullSoft Winamp 5.2 NullSoft Winamp 5.13 NullSoft Winamp 5.12 NullSoft Winamp 5.112 NullSoft Winamp 5.111 NullSoft Winamp 5.11 NullSoft Winamp 5.10 NullSoft Winamp 5.094 NullSoft Winamp 5.093 NullSoft Winamp 5.091 NullSoft Winamp 5.09 NullSoft Winamp 5.08 NullSoft Winamp 5.07 NullSoft Winamp 5.06 NullSoft Winamp 5.05 NullSoft Winamp 5.04 NullSoft Winamp 5.03 NullSoft Winamp 5.02 NullSoft Winamp 5.01 |
| Not Vulnerable: |
NullSoft Winamp 5.6 |
Discussion
Winamp Prior to 5.6 Multiple Vulnerabilities
Winamp is prone to multiple vulnerabilities because the application fails to validate user-supplied input.
Successful exploits will allow attackers to execute arbitrary code in the context of the application or cause denial-of-service conditions.
Please note that some of the issues may be related to the vulnerabilities described in BID 44094 (Winamp 5.581 and Prior Multiple Buffer Overflow Vulnerabilities). We will update this BID when more information becomes available.
Winamp versions prior to 5.6 are vulnerable.
Winamp is prone to multiple vulnerabilities because the application fails to validate user-supplied input.
Successful exploits will allow attackers to execute arbitrary code in the context of the application or cause denial-of-service conditions.
Please note that some of the issues may be related to the vulnerabilities described in BID 44094 (Winamp 5.581 and Prior Multiple Buffer Overflow Vulnerabilities). We will update this BID when more information becomes available.
Winamp versions prior to 5.6 are vulnerable.
Exploit / POC
Winamp Prior to 5.6 Multiple Vulnerabilities
Currently we are not aware of any exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Winamp Prior to 5.6 Multiple Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Winamp Prior to 5.6 Multiple Vulnerabilities
References:
References:
- Fixed Winamp 5 Bugs (Nullsoft)
- Winamp Homepage (Nullsoft)
- Winamp NSV Table of Contents Parsing Integer Overflow (Secunia Research)