NullSoft Winamp 3.0 Media Library ID3v2 Artist Tag Buffer Overrun Vulnerability
BID:6430
Info
NullSoft Winamp 3.0 Media Library ID3v2 Artist Tag Buffer Overrun Vulnerability
| Bugtraq ID: | 6430 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 19 2002 12:00AM |
| Updated: | Dec 19 2002 12:00AM |
| Credit: | Discovered by Tony Bettini. |
| Vulnerable: |
NullSoft Winamp 3.0 |
| Not Vulnerable: | |
Discussion
NullSoft Winamp 3.0 Media Library ID3v2 Artist Tag Buffer Overrun Vulnerability
It has been reported that Winamp 3.0 is vulnerable to a buffer overrun condition related to handling of ID3v2 information in MP3 files. The overrun occurs when MP3 files with 'Artist' ID3v2 tags of excessive length are opened via the Media Library interface.
It has been reported that Winamp 3.0 is vulnerable to a buffer overrun condition related to handling of ID3v2 information in MP3 files. The overrun occurs when MP3 files with 'Artist' ID3v2 tags of excessive length are opened via the Media Library interface.
Exploit / POC
NullSoft Winamp 3.0 Media Library ID3v2 Artist Tag Buffer Overrun Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
NullSoft Winamp 3.0 Media Library ID3v2 Artist Tag Buffer Overrun Vulnerability
Solution:
Winamp 3.0 bulid 488, built on Dec 15 2002, and later are not vulnerable. To obtain the build number, right click on the player title-bar and select the first menu option to view the 'About Winamp3' dialog. If the build number is lower than 488 or if the date is prior to Dec 15 2002, a new version of Winamp 3.0 should be downloaded from http://www.winamp.com.
Solution:
Winamp 3.0 bulid 488, built on Dec 15 2002, and later are not vulnerable. To obtain the build number, right click on the player title-bar and select the first menu option to view the 'About Winamp3' dialog. If the build number is lower than 488 or if the date is prior to Dec 15 2002, a new version of Winamp 3.0 should be downloaded from http://www.winamp.com.
References
NullSoft Winamp 3.0 Media Library ID3v2 Artist Tag Buffer Overrun Vulnerability
References:
References:
- Multiple Exploitable Buffer Overflows in Winamp (Foundstone)