CVE-2006-0476

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Winamp - Playlist UNC Path Computer Name Overflow (Metasploit)2010-04-30 · local · windows · Verified
• Winamp 5.12 - '.pls' Remote Buffer Overflow (Perl) (2)2007-03-07 · remote · windows · Verified
• Winamp 5.12 - '.pls' Remote Buffer Overflow (Metasploit)2006-01-31 · remote · windows · Verified
• Winamp 5.12 - '.pls' Remote Buffer Overflow (1)2006-01-29 · remote · windows · Verified

Impact

Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).

Affected products

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/18649
• http://securityreason.com/securityalert/386
• http://securityreason.com/securityalert/398
• http://securitytracker.com/id?1015552
• http://www.heise.de/newsticker/meldung/68981
• http://www.kb.cert.org/vuls/id/604745
• http://www.osvdb.org/22789
• http://www.securityfocus.com/archive/1/423436/100/0/threaded
• http://www.securityfocus.com/archive/1/423548/100/0/threaded
• http://www.securityfocus.com/bid/16410
• http://www.us-cert.gov/cas/techalerts/TA06-032A.html
• http://www.vupen.com/english/advisories/2006/0361
• http://www.winamp.com/player/version_history.php
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24361
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1402
• https://www.exploit-db.com/exploits/3422
• http://secunia.com/advisories/18649
• http://securityreason.com/securityalert/386
• http://securityreason.com/securityalert/398
• http://securitytracker.com/id?1015552
• http://www.heise.de/newsticker/meldung/68981
• http://www.kb.cert.org/vuls/id/604745
• http://www.osvdb.org/22789
• http://www.securityfocus.com/archive/1/423436/100/0/threaded
• http://www.securityfocus.com/archive/1/423548/100/0/threaded