Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line ending in .wma or (2) a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476.

The remote host is using Winamp, a popular media player for Windows.  It is possible that a remote attacker using a specially-crafted playlist can cause a buffer overflow in the version of Winamp installed on the remote host, resulting in a crash of the application or even execution of arbitrary code subject to the user's privileges.  An attacker exploiting this flaw would need to be able to convince a Winamp user to open a malicious '.m3u' file.

The remote host is using Winamp, a popular media player for Windows. 

It's possible that a remote attacker using a specially crafted M3U or PLS file can cause a buffer overflow in the version of Winamp installed on the remote Windows host, resulting in a crash of the application and even execution of arbitrary code remotely subject to the user's privileges.  Note that these issues can reportedly be exploited without user interaction by linking to a '.pls' file in an IFRAME tag.

The remote host is using Winamp, a popular media player for Windows.  It's possible that a remote attacker using a specially-crafted playlist can cause a buffer overflow in the version of Winamp installed on the remote host resulting in a crash of the application or even execution of arbitrary code remotely subject to the user's privileges.  This flaw can reportedly be exploited without user interaction by linking to a '.pls' file in an IFRAME tag.

ID	Name	Product	Family	Severity
3445	Winamp < 5.14 .M3U File Handling Buffer Overflow	Nessus Network Monitor	Generic	medium
20826	Winamp < 5.13 Playlist Handling Multiple Overflows	Nessus	Windows	high
3390	Winamp < 5.13 Malformed Playlist File Handling Overflow	Nessus Network Monitor	Generic	medium

Detections

Analytics

CVE-2005-3188

critical

Tenable Plugins

medium

high

medium