NullSoft Winamp B4S File Playlist Field Buffer Overflow Vulnerability

Bugtraq ID:	6515
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jan 04 2003 12:00AM
Updated:	Jan 04 2003 12:00AM
Credit:	Vulnerability discovery credited to D4rkGr3y <[email protected]>.
Vulnerable:	NullSoft Winamp 3.0
Not Vulnerable:

NullSoft Winamp B4S File Playlist Field Buffer Overflow Vulnerability

Winamp is a freely available media player from Nullsoft. It is available for the Microsoft Windows platform.

It has been reported that a problem exists in Winamp b4s files. When a b4s file is loaded that contains a playlist variable of excessive length, Winamp becomes unstable. It has been reported that this could allow a denial of service, and potentially code execution.

NullSoft Winamp B4S File Playlist Field Buffer Overflow Vulnerability

An exploit has been reported to exist, but is not available.

NullSoft Winamp B4S File Playlist Field Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

NullSoft Winamp B4S File Playlist Field Buffer Overflow Vulnerability

References:

• Winamp Home Page (NullSoft)
  
• WinAmp v.3.0: buffer overflow (D4rkGr3y )