Winamp < 5.07 IN_CDDA.dll m3u Playlist Processing Overflow

This script is Copyright (C) 2004-2015 Tenable Network Security, Inc.


Synopsis :

The remote Windows host contains a multimedia application that is
prone to a buffer overflow attack.

Description :

The remote host is using Winamp, a popular media player for Windows.

The version of Winamp installed on the remote Windows host has a
buffer overflow that may allow an attacker to execute arbitrary code
on the remote host subject to the privileges of the user running
Winamp.

To exploit this, an attacker would have to send a malformed playlist
(.m3u) to a user of this host and trick him into loading it with the
application.

Solution :

Upgrade to Winamp version 5.07 or later.

Risk factor :

High / CVSS Base Score : 9.3
(CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 7.7
(CVSS2#E:F/RL:OF/RC:C)
Public Exploit Available : true

Family: Windows

Nessus Plugin ID: 15817 ()

Bugtraq ID: 11730

CVE ID: CVE-2004-1119

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now