This host is installed with Winamp and is prone to insecure library loading vulnerability.

Successful exploitation will allow attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wnaspi32.dll. Impact Level: Application.

Upgrade to version 5.6 or later, For updates refer to http://www.winamp.com/media-player

The flaw is due to the application loading libraries in an insecure manner. This can be exploited to load arbitrary libraries by tricking a user into opening an 'ASX' file located on a remote WebDAV or SMB share.

Nullsoft Winamp version 5.581 and prior.

• http://secunia.com/advisories/41093/
• http://www.exploit-db.com/exploits/14789/

---

Updated on 2015-03-25