OSVDB ID: 69534 Title: Winamp in_nsv.dll NSV Table of Contents Data Overflow |
Info |
|
|
Dates |
||||
|
|
Description |
Winamp is prone to an overflow condition. An integer overflow error in 'in_nsv.dll' when parsing the NSV Table of Contents data can result in a heap-based buffer overflow. With a specially crafted stream or file, a context-dependent attacker can potentially execute arbitrary code. |
Classification |
Location:
Context Dependent
Attack Type: Input Manipulation Impact: Loss of Integrity Solution: Upgrade Exploit: Exploit Private Disclosure: RBS Confirmed, Vendor Verified, Coordinated Disclosure |
Solution |
Upgrade to version 5.6 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |