Winamp MIDI File Processing Code Execution Vulnerability
Last Update Date:
28 Jan 2011
Release Date:
9 Dec 2010
4849
Views
RISK: Medium Risk
A vulnerability has been identified in Winamp, which could be exploited by attackers to execute arbitrary code. This issue is caused by a memory corruption error in the "in_midi" module when processing malformed data within a MIDI file, which could be exploited by attackers to compromise a vulnerable system by convincing a user to open a malicious file.
Impact
- Remote Code Execution
System / Technologies affected
- Winamp version 5.6 and prior
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Upgrade to Winamp version 5.601 Build 3091 (5.6.0.3091).
Vulnerability Identifier
- No CVE information is available
Source
Related Link
Share with