Description
Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) ultravox-max-msg header to the Ultravox protocol handler or (2) unspecified Lyrics3 tags.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15686 ↗
- http://securitytracker.com/id?1017119 ↗
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=432 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29807 ↗
- http://secunia.com/advisories/22580 ↗
- http://www.securityfocus.com/bid/20744 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29804 ↗
- http://www.kb.cert.org/vuls/id/449092 ↗
- http://securitytracker.com/id?1017120 ↗
- http://www.vupen.com/english/advisories/2006/4196 ↗
- http://www.winamp.com/player/version_history.php#5.31 ↗
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=431 ↗