Multiple buffer overrun vulnerabilties exist in Winamp, a popular media jukebox player for Windows that supports all popular audio formats, including MP3 CD, and WMA.
Winamp 2.81 overflow If a long artist ID3v2 tag is present within an MP3, Winamp 2.81 will crash, yielding privileges immediately upon loading the MP3.
Winamp 3.0 Media Library Overflows If an MP3 is loaded that has an ID3v2 tag, an attacker could create a malicious MP3 file that could compromise the system and allow the malicous attacker to run remote code on the user's system.
|