Winamp AVI And IT Files Parsing Buffer Overflow Vulnerabilities

  1. Network Vulnerabilities
  2. Buffer overflow
  3. Winamp AVI And IT Files Parsing Buffer Overflow Vulnerabilities
Summary
This host is installed with Winamp and is prone to buffer overflow vulnerabilities.
Impact
Successful exploitation will allow attackers to execute arbitrary code or cause a buffer overflow. Impact Level: Application.
Solution
Upgrade to Winamp 5.623 or later, For updates refer to http://www.winamp.com/media-player
Insight
Flaws are due to an error in, - 'in_avi.dll' plugin when parsing an AVI file with a crafted value for the number of streams or the size of the RIFF INFO chunk. - 'in_mod.dll' plugin when parsing a crafted song message data in an Impulse Tracker (IT) file.
Affected
Nullsoft Winamp version 5.622 and prior.
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities