PT-2003-2217 · Nullsoft · Winamp

Publicado 2003-12-31 · Atualizado 2017-07-11 · CVE-2003-1272

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Winamp version 3.0

Description The issue concerns multiple buffer overflows that can be triggered by a .b4s file with either a long playlist name or a long path in a file argument to the Playstring parameter. This can cause a denial of service, leading to a crash, and potentially allow the execution of arbitrary code.

Recommendations For Winamp version 3.0, avoid using .b4s files with long playlist names or long paths in file arguments to the Playstring parameter until a fix is available. As a temporary workaround, consider restricting the use of .b4s files or limiting the length of playlist names and file paths to prevent potential exploitation.

Correção

Identificadores relacionados

CVE-2003-1272

Produtos afetados

Winamp

Referências · 7

• http://securityfocus.com/bid/6516 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1272 · Nota
• http://iss.net/security_center/static/10980.php · Nota
• http://archives.neohapsis.com/archives/bugtraq/2003-01/0025.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-1272 · Nota de Segurança
• http://securityfocus.com/bid/6515 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10981 · Nota