PT-2009-4296 · Nullsoft · Winamp
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Nullsoft Winamp versions prior to 5.552
Description:
The issue allows remote attackers to execute arbitrary code via a crafted MAKI file. This is due to an incorrect sign extension, an integer overflow, and a stack-based buffer overflow in the Nullsoft Modern Skins Support module (gen ff.dll).
Recommendations:
For versions prior to 5.552, update to version 5.552 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted MAKI files until the update is applied.
Exploit
Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Winamp