Detections
Analytics
Winamp < 5.34 Multiple Vulnerabilities
high Nessus Plugin ID 25770
Synopsis
The remote Windows host contains a multimedia application that is affected by multiple vulnerabilities.Description
The remote host is using Winamp, a popular media player for Windows.The version of Winamp installed on the remote Windows host reportedly contains a flaw in its 'libsndfile.dll' library that may allow an attacker to corrupt memory using a specially crafted Matlab (.MAT) sound file and execute arbitrary code subject to the privileges of the user.
In addition, it may also be affected by similar issues in its optional Module Decoder (in_mod.dll) plugin involving malicious .IT and .S3M files.
Solution
Upgrade to Winamp version 5.34 or later.See Also
https://www.piotrbania.com/all/adv/nullsoft-winamp-libsndfile-adv.txt
https://www.piotrbania.com/all/adv/nullsoft-winamp-s3m_module-in_mod-adv.txt
https://www.piotrbania.com/all/adv/nullsoft-winamp-it_module-in_mod-adv.txt
https://www.securityfocus.com/archive/1/464889/30/0/threaded
https://www.securityfocus.com/archive/1/464890/30/0/threaded
https://www.securityfocus.com/archive/1/464893/30/0/threaded
Plugin Details
Severity: High
ID: 25770
File Name: winamp_534.nasl
Version: 1.18
Type: local
Agent: windows
Family: Windows
Published: 7/27/2007
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:nullsoft:winamp
Required KB Items: SMB/Winamp/Version
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 4/6/2007
Reference Information
CVE: CVE-2007-1921, CVE-2007-1922
CWE: 20