Winamp < 5.34 Multiple Vulnerabilities

high Nessus Plugin ID 25770

Synopsis

The remote Windows host contains a multimedia application that is affected by multiple vulnerabilities.

Description

The remote host is using Winamp, a popular media player for Windows.

The version of Winamp installed on the remote Windows host reportedly contains a flaw in its 'libsndfile.dll' library that may allow an attacker to corrupt memory using a specially crafted Matlab (.MAT) sound file and execute arbitrary code subject to the privileges of the user.

In addition, it may also be affected by similar issues in its optional Module Decoder (in_mod.dll) plugin involving malicious .IT and .S3M files.

Solution

Upgrade to Winamp version 5.34 or later.

See Also

https://www.piotrbania.com/all/adv/nullsoft-winamp-libsndfile-adv.txt

https://www.piotrbania.com/all/adv/nullsoft-winamp-s3m_module-in_mod-adv.txt

https://www.piotrbania.com/all/adv/nullsoft-winamp-it_module-in_mod-adv.txt

https://www.securityfocus.com/archive/1/464889/30/0/threaded

https://www.securityfocus.com/archive/1/464890/30/0/threaded

https://www.securityfocus.com/archive/1/464893/30/0/threaded

http://forums.winamp.com/showthread.php?threadid=269831

http://www.winamp.com/player/version-history

Plugin Details

Severity: High

ID: 25770

File Name: winamp_534.nasl

Version: 1.18

Type: local

Agent: windows

Family: Windows

Published: 7/27/2007

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:nullsoft:winamp

Required KB Items: SMB/Winamp/Version

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 4/6/2007

Reference Information

CVE: CVE-2007-1921, CVE-2007-1922

BID: 23350, 23351

CWE: 20