PT-2009-3430 · Nullsoft · Gen Msn Plugin+1

Skd · Publicado 2009-03-05 · Atualizado 2017-09-29 · CVE-2009-0833

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Winamp version 5.541 with gen msn plugin 0.31

Description A boundary error in the gen msn.dll of the gen msn plugin for Winamp can be exploited to cause a buffer overflow when processing overly long Winamp playlist entries. This can be achieved by tricking the user into opening a specially crafted playlist file with a long URL in the File1 field. Successful exploitation may allow execution of arbitrary code.

Recommendations For Winamp version 5.541 with gen msn plugin 0.31, consider disabling the gen msn plugin until a patch is available to prevent exploitation. As a temporary workaround, avoid opening unfamiliar or suspicious playlist files to minimize the risk of exploitation.

Exploit

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-0833

Produtos afetados

Winamp

Gen Msn Plugin

Referências · 6

• 🔥 https://exploit-db.com/exploits/7696 · Exploit
• 🔥 http://securityfocus.com/bid/33159 · Exploit
• http://secunia.com/advisories/33425 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15659 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0833 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0833 · Nota de Segurança