Winamp < 5.552 Modern Skins Support Module (gen_ff.dll) MAKI File Handling Overflow

This script is Copyright (C) 2009-2016 Tenable Network Security, Inc.


Synopsis :

The remote Windows host contains a multimedia application that is
affected by an integer overflow vulnerability.

Description :

The remote host is running Winamp, a media player for Windows.

The version of Winamp installed on the remote host is earlier than
5.552. Such versions are reportedly affected by an integer overflow
vulnerability when processing '.maki' files. An attacker
could exploit this to execute arbitrary code in the context of the
affected application.

See also :

http://www.nessus.org/u?a206c855
http://forums.winamp.com/showthread.php?threadid=303193#notes9

Solution :

Upgrade to Winamp version 5.552 or later.

Risk factor :

High / CVSS Base Score : 9.3
(CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 7.7
(CVSS2#E:F/RL:OF/RC:ND)
Public Exploit Available : true

Family: Windows

Nessus Plugin ID: 38858 ()

Bugtraq ID: 35052

CVE ID: CVE-2009-1831

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now