Detections
Analytics
Winamp < 5.2 Multiple Vulnerabilities
high Nessus Plugin ID 20973
Synopsis
A multimedia application that is vulnerable to denial of service attacks is installed on the remote Windows host.Description
The remote host is using Winamp, a popular media player for Windows.The version of Winamp installed on the remote Windows host reportedly crashes if the user tries to open an M3U file with a long filename.
In addition, it reportedly contains a buffer overflow flaw that can be exploited using a specially crafted M3U file to either crash the application or possibly even execute arbitrary code remotely.
Solution
Upgrade to Winamp version 5.2 or later.See Also
https://www.securityfocus.com/archive/1/424903/30/0/threaded
https://www.securityfocus.com/archive/1/425888/30/0/threaded
Plugin Details
Severity: High
ID: 20973
File Name: winamp_52.nasl
Version: 1.22
Type: local
Agent: windows
Family: Windows
Published: 2/25/2006
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:nullsoft:winamp
Required KB Items: SMB/Winamp/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 2/21/2006
Vulnerability Publication Date: 2/14/2006
Reference Information
CVE: CVE-2006-0708, CVE-2006-0720