PT-2011-5148 · Nullsoft · Winamp

Publicado 2011-12-16 · Atualizado 2017-09-19 · CVE-2011-4857

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Winamp versions prior to 5.623

Description The issue is related to a heap-based buffer overflow in the in mod.dll plugin, which allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file.

Recommendations For versions prior to 5.623, update to version 5.623 or later to resolve the issue. As a temporary workaround, consider disabling the in mod.dll plugin until a patch is available. Restrict access to Impulse Tracker (IT) files to minimize the risk of exploitation.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-4857

Produtos afetados

Winamp

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/72054 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15351 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4857 · Nota
• http://xforce.iss.net/xforce/xfdb/72054 · Nota
• http://secunia.com/advisories/46882 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-4857 · Nota de Segurança
• http://forums.winamp.com/showthread.php?t=332010 · Nota