Two weaknesses and a vulnerability have been reported in Winamp, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a user's system.

1) A boundary error during the handling of files with an .m3u file extension can be exploited to cause a buffer overflow via a specially crafted playlist containing a file with an overly long filename.

Successful exploitation crashes the application. Arbitrary code execution may be possible, but has not been proven.

The weaknesses have been reported in version 5.13. Prior versions may also be affected.

2) A boundary error during the handling of overly long filenames can be exploited to cause a buffer overflow via a playlist containing a file with an overly long filename.

Successful exploitation crashes the application. Arbitrary code execution may be possible, but has not been proven.

The weaknesses have been reported in version 5.13. Prior versions may also be affected.

3) A boundary error within the .m3u playlist file handling can be exploited to cause a buffer overflow via a specially crafted .m3u playlist when playing is paused or stopped.

Successful exploitation crashes the application and may reportedly also allow execution of arbitrary code.

The vulnerability has been reported in versions 5.12 and 5.13. Prior versions may also be affected.

Solution
Update to version 5.2.

Provided and/or discovered by
1) Alan McCaig
2) Sowhat
3) Liu Yexin of NSFocus and P. Robinson of IRM.

Changelog
Further details available in Customer Area

Original Advisory
Winamp.com:
http://forums.winamp.com/showthread.php?s=&threadid=238648

NSFOCUS:
http://www.nsfocus.com/english/homepage/research/0601.htm

IRM:
http://www.irmplc.com/advisory018.htm

Sowhat:
http://secway.org/advisory/AD20060216.txt

Deep Links
Links available in Customer Area