The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
Winamp Ultravox Streaming Metadata Parsing Buffer Overflows
------------------------------------------------------------------------
SUMMARY
" <http://www.winamp.com/> Winamp is more than just a player. It's your
window to the multimedia world. From MP3s to streaming video, Winamp is
the one place you go to feed your audio/video habit.". Secunia Research
has discovered two vulnerabilities in Winamp, which can be exploited by
malicious people to compromise a user's system.
DETAILS
Vulnerable Systems:
* Winamp version 5.21, version 5.5 and version 5.51
Immune Systems:
* Winamp version 5.52
The vulnerablities are caused due to boundary errors in in_mp3.dll within
the construction of stream titles when parsing Ultravox streaming
metadata. This can be exploited to cause stack-based b uffer overflows via
overly long "<artist>" and "<name>" tag values in the <metadata> section.
Successful exploitation allows execution of arbitrary code.
CVE Information:
<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0065>
CVE-2008-0065
ADDITIONAL INFORMATION
The information has been provided by Secunia Research.
The original article can be found at:
<http://secunia.com/secunia_research/2008-2/advisory/>
http://secunia.com/secunia_research/2008-2/advisory/
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
