WinAmp MIDI File Handling Buffer Overflow Vulnerability
Secunia Advisory: SA20722 Print Advisory
Release Date: 2006-06-21
Critical: Highly critical
Impact: DoS
System access
Where: From remote
Solution Status: Unpatched
Software: Winamp 5.x
Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it.
Description:
BassReFLeX has discovered a vulnerability in WinAmp, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system.
The vulnerability is cause due to a boundary error within the MIDI plug-in (in_midi.dll) when handling MIDI files. This can be exploited to cause a heap-based buffer overflow via a malicious ".mid" file with a specially crafted header.
Successful exploitation crashes the application and may allow execution of arbitrary code.
The vulnerability has been confirmed in version 5.23 and has also been reported in version 5.21. Other versions may also be affected.
NOTE: The vulnerability may be related to one reported by Fortinet Security Research Team.
Solution:
Restrict use to trusted MIDI files only.
Use another program for opening MIDI files by default.
Bollettino Secunia
Secunia Advisory: SA20722 Print Advisory
Release Date: 2006-06-21
Critical: Highly critical
Impact: DoS
System access
Where: From remote
Solution Status: Unpatched
Software: Winamp 5.x
Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it.
Description:
BassReFLeX has discovered a vulnerability in WinAmp, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system.
The vulnerability is cause due to a boundary error within the MIDI plug-in (in_midi.dll) when handling MIDI files. This can be exploited to cause a heap-based buffer overflow via a malicious ".mid" file with a specially crafted header.
Successful exploitation crashes the application and may allow execution of arbitrary code.
The vulnerability has been confirmed in version 5.23 and has also been reported in version 5.21. Other versions may also be affected.
NOTE: The vulnerability may be related to one reported by Fortinet Security Research Team.
Solution:
Restrict use to trusted MIDI files only.
Use another program for opening MIDI files by default.
Bollettino Secunia