Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid (MIDI) file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Winamp | Nullsoft | * | 5.23 (including) |
| Winamp | Nullsoft | 2.90 (including) | 2.90 (including) |
| Winamp | Nullsoft | 2.91 (including) | 2.91 (including) |
| Winamp | Nullsoft | 2.95 (including) | 2.95 (including) |
| Winamp | Nullsoft | 3.0 (including) | 3.0 (including) |
| Winamp | Nullsoft | 3.1 (including) | 3.1 (including) |
| Winamp | Nullsoft | 5.0 (including) | 5.0 (including) |
| Winamp | Nullsoft | 5.0.1 (including) | 5.0.1 (including) |
| Winamp | Nullsoft | 5.0.2 (including) | 5.0.2 (including) |
| Winamp | Nullsoft | 5.01 (including) | 5.01 (including) |
| Winamp | Nullsoft | 5.1 (including) | 5.1 (including) |
| Winamp | Nullsoft | 5.02 (including) | 5.02 (including) |
| Winamp | Nullsoft | 5.2 (including) | 5.2 (including) |
| Winamp | Nullsoft | 5.03 (including) | 5.03 (including) |
| Winamp | Nullsoft | 5.03a (including) | 5.03a (including) |
| Winamp | Nullsoft | 5.04 (including) | 5.04 (including) |
| Winamp | Nullsoft | 5.05 (including) | 5.05 (including) |
| Winamp | Nullsoft | 5.06 (including) | 5.06 (including) |
| Winamp | Nullsoft | 5.07 (including) | 5.07 (including) |
| Winamp | Nullsoft | 5.08c (including) | 5.08c (including) |
| Winamp | Nullsoft | 5.08d (including) | 5.08d (including) |
| Winamp | Nullsoft | 5.08e (including) | 5.08e (including) |
| Winamp | Nullsoft | 5.09 (including) | 5.09 (including) |
| Winamp | Nullsoft | 5.11 (including) | 5.11 (including) |
| Winamp | Nullsoft | 5.12 (including) | 5.12 (including) |
| Winamp | Nullsoft | 5.13 (including) | 5.13 (including) |
| Winamp | Nullsoft | 5.21 (including) | 5.21 (including) |
| Winamp | Nullsoft | 5.091 (including) | 5.091 (including) |
| Winamp | Nullsoft | 5.093 (including) | 5.093 (including) |
| Winamp | Nullsoft | 5.094 (including) | 5.094 (including) |
References
- http://forums.winamp.com/showthread.php?threadid=248100
- http://secunia.com/advisories/20722
- http://www.attrition.org/pipermail/vim/2006-June/000892.html
- http://www.attrition.org/pipermail/vim/2006-June/000893.html
- http://www.winamp.com/about/article.php?aid=10694
- https://www.exploit-db.com/exploits/1935
- http://forums.winamp.com/showthread.php?threadid=248100
- http://secunia.com/advisories/20722
- http://www.attrition.org/pipermail/vim/2006-June/000892.html
- http://www.attrition.org/pipermail/vim/2006-June/000893.html
- http://www.winamp.com/about/article.php?aid=10694
- https://www.exploit-db.com/exploits/1935