Secunia

SkD has discovered a vulnerability in the gen_msn plugin for Winamp, which can be exploited by malicious people to potentially compromise a user's system.

The vulnerability is caused due to a boundary error in gen_msn.dll when processing overly long Winamp playlist entries. This can be exploited to cause a buffer overflow by e.g. tricking the user into opening a specially crafted playlist file.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is confirmed in gen_msn version 0.31 with Winamp 5.541. Other versions may also be affected.

Solution
Do not open untrusted files or streams in Winamp with gen_msn installed.

Provided and/or discovered by
SkD

Changelog
Further details available in Customer Area

Original Advisory
http://milw0rm.com/exploits/7696

Deep Links
Links available in Customer Area