Secunia

BassReFLeX has discovered a vulnerability in WinAmp, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is cause due to a boundary error within the MIDI plug-in (in_midi.dll) when handling MIDI files. This can be exploited to cause a heap-based buffer overflow via a malicious ".mid" file with a specially crafted header.

Successful exploitation may allow execution of arbitrary code.

The vulnerability has been confirmed in version 5.23 and has also been reported in version 5.21. Other versions may also be affected.

NOTE: The vulnerability may be related to one reported by Fortinet Security Research Team.

Solution
Update to version 5.24.

Provided and/or discovered by
BassReFLeX

Changelog
Further details available in Customer Area

Original Advisory
Winamp:
http://www.winamp.com/player/version_history.php#5.24

milw0rm:
http://www.milw0rm.com/exploits/1935

Fortinet:
http://www.fortiguardcenter.com/advisory/FGA-2006-16.html

Deep Links
Links available in Customer Area