A buffer overflow exists in Winamp. Winamp fails to check bounds on the length of playlist entries resulting in a buffer overflow. With a specially crafted file, a local attacker can cause arbitrary code execution resulting in a loss of integrity.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Public
Solution
An upgrade is required as there are no known workarounds.
This product uses the Daylife API but is not endorsed or certified by Daylife.
This section lists the latest news and blogs found via the daylife API (and for older items, the technorati API), which mention or otherwise discuss this vulnerability.