Brett Moore has reported a vulnerability in Winamp, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the "IN_CDDA.dll" file. This can be exploited in various ways to cause a stack-based buffer overflow e.g. by tricking a user into visiting a malicious web site containing a specially crafted ".m3u" playlist.

Successful exploitation allows execution of arbitrary code.

The vulnerability has been reported in version 5.05 and confirmed in version 5.06. Prior versions may also be affected.

Solution
Update to version 5.07.
Further details available to Secunia VIM customers

Provided and/or discovered by
Brett Moore, Security-Assessment.com.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Nullsoft:
http://forums.winamp.com/showthread.php?s=&threadid=159785

Brett Moore:
http://www.security-assessment.com/Papers/Winamp_IN_CDDA_Buffer_Overflow.pdf

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers