Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2004-1150
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2004-1150

Description:
Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, as demonstrated with a .m3u or .pls playlist file.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/18840

VULNWATCH

SAID
  Secunia Advisory: SA13781

MISC
  http://www.nsfocus.com/english/homepage/research/0501.htm

CONFIRM
  http://www.winamp.com/player/version_history.php

BUGTRAQ
  http://marc.theaimsgroup.com/?l=bugtraq&m=110684140108614&w=2

BID
  12381


Return to the previous page.