Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Winamp vulnerability : technical study and Exploit released
From: "ElviS .de" <elvi52001 () yahoo com>
Date: Wed, 24 Nov 2004 07:08:52 -0800 (PST)

exploit and technical study of the Winamp flaw posted by k-otik
 
http://www.k-otik.com/exploits/20041124.winampm3u.c.php  
"..the cdda library only reserves 20 bytes for names when files are .cda, so the stack will be overwritten and 
exception occurs when a name looks like aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.cda"
 
but still NO patch from Winamp !!!


                
---------------------------------
Do you Yahoo!?
 Yahoo! Mail - You care about security. So do we.

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault