A  Vulnerability has been reported in Winamp, which can be exploited by malicious people to compromise a user's system.

A  Vulnerability has been reported in Winamp, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the handling of ID3v2 tags and can be exploited to cause a buffer overflow via e.g. a MP3 file containing an overly long string in the "Artist" field.

Successful exploitation allows execution of arbitrary code, but requires some user interaction (e.g. that the user adds a malicious MP3 file to a playlist and then plays the file).

The vulnerability has been reported in versions 5.03a, 5.09, and 5.091. Other versions may also be affected.

Update to version 5.094.