PT-2007-5573 · Nullsoft · Winamp

Publicado 2007-08-17 · Atualizado 2018-10-15 · CVE-2007-4392

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Winamp version 5.35

Description The issue allows remote attackers to cause a denial of service, resulting in a program stack overflow and application crash. This can be achieved via an M3U file that recursively includes itself.

Recommendations For Winamp version 5.35, avoid using M3U files that recursively include themselves to prevent the denial of service. As a temporary workaround, consider restricting the use of M3U files until a patch is available.

Correção

Identificadores relacionados

CVE-2007-4392

Produtos afetados

Winamp

Referências · 13

• http://securityfocus.com/archive/1/archive/1/475260/100/200/threaded · Nota
• http://morph3us.org/advisories/20070730-winamp-5.35.txt · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15504 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4392 · Nota
• http://securityfocus.com/archive/1/archive/1/475161/100/200/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4392 · Nota de Segurança
• http://securityfocus.com/archive/1/475161/100/200/threaded · Nota
• http://securityreason.com/securityalert/3040 · Nota
• http://securityfocus.com/archive/1/archive/1/475489/100/200/threaded · Nota
• http://securityfocus.com/archive/1/475260/100/200/threaded · Nota
• http://securityfocus.com/archive/1/archive/1/475183/100/200/threaded · Nota
• http://securityfocus.com/archive/1/475489/100/200/threaded · Nota
• http://securityfocus.com/archive/1/475183/100/200/threaded · Nota