mailing list archives
Re: Winamp vulnerability : technical study and Exploit released
From: Rich Eicher <reicher () gmail com>
Date: Wed, 24 Nov 2004 11:04:56 -0600
This may have something to do with why there is no patch out from Nullsoft.
On Wed, 24 Nov 2004 07:08:52 -0800 (PST), ElviS .de <elvi52001 () yahoo com> wrote:
exploit and technical study of the Winamp flaw posted by k-otik
"..the cdda library only reserves 20 bytes for names when files are .cda, so
the stack will be overwritten and exception occurs when a name looks like
but still NO patch from Winamp !!!
Do you Yahoo!?
Yahoo! Mail - You care about security. So do we.
Full-Disclosure - We believe in it.