Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

B0F

Pesquisador deiDefense, Inc.
#34320de 53,624
7.6CVSS total
Vulnerabilidades · 1
PT-2005-4006
7.6
2005-12-31
Nullsoft · Nullsoft Winamp · CVE-2005-3188
**Name of the Vulnerable Software and Affected Versions** Nullsoft Winamp version 5.094 **Description** The issue is related to a buffer overflow that allows remote attackers to execute arbitrary code. This can be achieved through an m3u file with a long line ending in .wma or a pls file with a long File1 value ending in .wma. The application fails to perform proper bounds checking, resulting in a buffer overflow. This can lead to arbitrary code execution or cause the application to crash, resulting in a loss of integrity and/or availability. **Recommendations** For Nullsoft Winamp version 5.094, consider avoiding the use of .m3u and .pls files with long lines or values ending in .wma until a patch is available. As a temporary workaround, restrict the handling of files with .wma extensions to minimize the risk of exploitation.