PT-2004-2311 · Nullsoft · Winamp
Ken Macinnis
·
Publicado
2004-12-31
·
Atualizado
2017-07-11
·
CVE-2004-1396
CVSS v2.0
2.6
Baixa
| Vetor | AV:N/AC:H/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions:
Winamp version 5.07
Winamp (other versions possibly affected)
Description:
The issue allows remote attackers to cause a denial of service, resulting in application crash or CPU consumption. This can be achieved through an mp4 or m4a playlist file containing invalid tag data or an invalid .nsv or .nsa file. A specially crafted file with a size of 1MB and either .nsv or .nsa file extension can consume all CPU resources when opened, leading to loss of availability.
Recommendations:
For Winamp version 5.07, avoid opening .nsv or .nsa files from untrusted sources to minimize the risk of exploitation.
For other possibly affected versions of Winamp, restrict access to files with .nsv and .nsa extensions until a fix is available.
As a temporary workaround, consider disabling the playback of .nsv and .nsa files in Winamp until a patch is available.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Winamp