Detections
Analytics
Winamp < 5.601 MIDI Timestamp Stack Buffer Overflow
medium Nessus Network Monitor Plugin ID 5726
Synopsis
The remote host has a media player installed that is vulnerable to a buffer overflow attack.Description
The remote host is running Winamp, a media player for Windows.Versions of Winamp earlier than 5.601 are potentially affected by a stack buffer overflow vulnerability due to an error in the 'in_midi.dll' plugin which improperly serializes timestamps in MIDI file. A specially crafted MIDI file can cause the application to overwrite the saved base pointer and allows execution of arbitrary code.
Solution
Upgrade to Winamp 5.601 or later.See Also
http://forums.winamp.com/showthread.php?s=&threadid=159785
http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt