NullSoft Winamp B4S File Cyrillic Playlist Field Denial Of Service Vulnerability

Bugtraq ID:	6517
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Jan 04 2003 12:00AM
Updated:	Jan 04 2003 12:00AM
Credit:	Vulnerability discovery credited to D4rkGr3y <[email protected]>.
Vulnerable:	NullSoft Winamp 3.0
Not Vulnerable:

NullSoft Winamp B4S File Cyrillic Playlist Field Denial Of Service Vulnerability

It has been reported that a problem exists in Winamp b4s files. When a b4s file is loaded that contains a playlist variable containing cyrillic characters, Winamp becomes unstable. It has been reported that this could cause the program to crash.

NullSoft Winamp B4S File Cyrillic Playlist Field Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

NullSoft Winamp B4S File Cyrillic Playlist Field Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

NullSoft Winamp B4S File Cyrillic Playlist Field Denial Of Service Vulnerability

References:

• Winamp Home Page (NullSoft)
  
• WinAmp v.3.0: buffer overflow (D4rkGr3y )