Detections
Analytics

Winamp < 5.666 Multiple Memory Corruptions

medium Nessus Plugin ID 71787

Language:

Synopsis

The remote Windows host contains a multimedia application that is affected by multiple memory corruption vulnerabilities.

Description

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is a version prior to 5.666. It is, therefore, reportedly affected by the following vulnerabilities :

 - A memory corruption error exists in 'in_midi.dll' when processing specially crafted '.kar' files.

 - A memory corruption error exists in 'libmp4v2.dll' due to a NULL pointer dereference when processing specially crafted files.

An attacker could exploit these vulnerabilities to cause a denial of service.

Solution

Upgrade to Winamp 5.666 (5.6.6.3516) or later.

See Also

http://www.winamp.com/help/Version_History

http://forums.winamp.com/showthread.php?t=373755

Plugin Details

Severity: Medium

ID: 71787

File Name: winamp_5666.nasl

Version: 1.4

Type: local

Agent: windows

Family: Windows

Published: 1/3/2014

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

CPE: cpe:/a:nullsoft:winamp

Required KB Items: SMB/Winamp/Version

Exploit Ease: No known exploits are available

Patch Publication Date: 12/12/2013

Vulnerability Publication Date: 10/27/2013

Reference Information

BID: 63914