Secunia

Piotr Bania has discovered a vulnerability in Winamp, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error within the LIBSNDFILE.DLL library when handling Matlab version 4.2 files. This can be exploited to overwrite an arbitrary memory location with a NULL byte when opening a specially crafted MAT file.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is confirmed in version 5.33. Other versions and applications that use the library may also be affected.

Solution
Update to version 5.34 or later.
Further details available in Customer Area

Provided and/or discovered by
Piotr Bania

Changelog
Further details available in Customer Area

Original Advisory
Nullsoft:
http://forums.winamp.com/showthread.php?threadid=269831

Piotr Bania:
http://www.piotrbania.com/all/adv/nullsoft-winamp-libsndfile-adv.txt

Deep Links
Links available in Customer Area