Marsu has reported a vulnerability in Winamp, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error within the handling of MP4 files and can be exploited to cause memory corruption via a specially crafted MP4 file.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in version 5.34. Other versions may also be affected.

Solution
Update to version 5.35 or apply patch.
Further details available to Secunia VIM customers

Provided and/or discovered by
Marsu

Changelog
Further details available to Secunia VIM customers

Original Advisory
Nullsoft:
http://forums.winamp.com/showthread.php?threadid=269831#patch
http://forums.winamp.com/showthread.php?postid=2180629#post2180629
http://forums.winamp.com/showthread.php?s=&threadid=159785
http://forums.winamp.com/showthread.php?threadid=270944

milw0rm:
http://milw0rm.com/exploits/3823

Deep Links
Links available to Secunia VIM customers