Description
Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/archive/1/425888/100/0/threaded ↗
- http://securityreason.com/securityalert/476 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24740 ↗
- http://forums.winamp.com/showthread.php?threadid=238648 ↗
- http://www.nsfocus.com/english/homepage/research/0601.htm ↗
- http://www.securityfocus.com/bid/16785 ↗
- http://securitytracker.com/id?1015675 ↗