Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

B0F

Researcher fromiDefense, Inc.
#34292of 53,622
7.6Total CVSS
Vulnerabilities · 1
PT-2005-4006
7.6
2005-12-31
Nullsoft · Nullsoft Winamp · CVE-2005-3188
**Name of the Vulnerable Software and Affected Versions** Nullsoft Winamp version 5.094 **Description** The issue is related to a buffer overflow that allows remote attackers to execute arbitrary code. This can be achieved through an m3u file with a long line ending in .wma or a pls file with a long File1 value ending in .wma. The application fails to perform proper bounds checking, resulting in a buffer overflow. This can lead to arbitrary code execution or cause the application to crash, resulting in a loss of integrity and/or availability. **Recommendations** For Nullsoft Winamp version 5.094, consider avoiding the use of .m3u and .pls files with long lines or values ending in .wma until a patch is available. As a temporary workaround, restrict the handling of files with .wma extensions to minimize the risk of exploitation.