F-Secure Vulnerability Information :
Winamp Playlist File Handling Buffer Overflows

Two weaknesses and a vulnerability have been reported in Winamp, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a user"s system.

1) A boundary error during the handling of files with an .m3u file extension can be exploited to cause a buffer overflow via a specially crafted playlist containing a file with an overly long filename.

Successful exploitation crashes the application. Arbitrary code execution may be possible, but has not been proven.

The weaknesses have been reported in version 5.13. Prior versions may also be affected.

2) A boundary error during the handling of overly long filenames can be exploited to cause a buffer overflow via a playlist containing a file with an overly long filename.

Successful exploitation crashes the application. Arbitrary code execution may be possible, but has not been proven.

The weaknesses have been reported in version 5.13. Prior versions may also be affected.

3) A boundary error within the .m3u playlist file handling can be exploited to cause a buffer overflow via a specially crafted .m3u playlist when playing is paused or stopped.

Successful exploitation crashes the application and may reportedly also allow execution of arbitrary code.

The vulnerability has been reported in versions 5.12 and 5.13. Prior versions may also be affected.