Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Nullsoft Winamp M3U文件处理静态缓冲区溢出漏洞
Vulnerability Description
Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp在处理.m3u列表文件中的条目时存在缓冲缓冲区溢出漏洞，攻击者可能利用此漏洞在用户机器上执行任意指令。 Winamp可以通过加载.m3u列表文件来播放其中的文件，当某个文件播放停止时，Winamp会重新设置程序标题。这时Winamp错误地使用了strncpy()函数，导致一个静态缓冲区溢出。攻击者通过构造恶意的.m3u播放文件，可能导致被攻击用户的winamp崩溃，远程代码执行也是有可能的。
CVSS Information
N/A
Vulnerability Type
N/A