Secunia Advisory: SA16077

Leon Juranic has reported a vulnerability in Winamp 5.x, which can be exploited by malicious people to compromise a user’s system.

The vulnerability is caused due to a boundary error in the handling of ID3v2 tags and can be exploited to cause a buffer overflow via e.g. a MP3 file containing an overly long string in the “Artist” field.

Successful exploitation allows execution of arbitrary code, but requires some user interaction (e.g. that the user adds a malicious MP3 file to a playlist and then plays the file).

The vulnerability has been reported in versions 5.03a, 5.09, and 5.091. Other versions may also be affected.

Critical: Highly critical
Impact: System access
Where: From remote
Solution Status: Unpatched
Solution: The vendor will reportedly issue a fixed version soon.

[Continue reading Secunia Advisory: SA16077]