PT-2009-3430 · Nullsoft · Gen Msn Plugin+1

Skd · Published 2009-03-05 · Updated 2017-09-29 · CVE-2009-0833

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Winamp version 5.541 with gen msn plugin 0.31

Description A boundary error in the gen msn.dll of the gen msn plugin for Winamp can be exploited to cause a buffer overflow when processing overly long Winamp playlist entries. This can be achieved by tricking the user into opening a specially crafted playlist file with a long URL in the File1 field. Successful exploitation may allow execution of arbitrary code.

Recommendations For Winamp version 5.541 with gen msn plugin 0.31, consider disabling the gen msn plugin until a patch is available to prevent exploitation. As a temporary workaround, avoid opening unfamiliar or suspicious playlist files to minimize the risk of exploitation.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-0833

Affected Products

Winamp

Gen Msn Plugin

References · 6

• 🔥 https://exploit-db.com/exploits/7696 · Exploit
• 🔥 http://securityfocus.com/bid/33159 · Exploit
• http://secunia.com/advisories/33425 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0833 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15659 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0833 · Note