| Package | Affected versions | Patched versions |
|---|---|---|
| winamp | = 0.20a= 0.92= 1.006= 1.90= 2.0= 2.10= 2.6= 2.9= 2.91= 2.92= 2.95= 5.0= 5.01= 5.02= 5.03= 5.04= 5.05= 5.06= 5.07= 5.08c= 5.08d= 5.08e= 5.09= 5.091= 5.093= 5.094= 5.1= 5.11= 5.111= 5.112= 5.12= 5.13= 5.2= 5.21= 5.22= 5.23= 5.24= 5.3= 5.31= 5.32= 5.33= 5.34= 5.35= 5.36= 5.5= 5.51= 5.52= 5.53= 5.531= 5.54= 5.541= 5.55= 5.551= 5.552= 5.56= 5.57= 5.572= 5.58= 5.581= 5.59= 5.61= 5.623≤ 5.63 |
Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free