CVE-2013-4694

Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk.

• nullsoft winamp (<= 5.63) • nullsoft winamp 0.20a • nullsoft winamp 0.92 • nullsoft winamp 1.006 • nullsoft winamp 1.90 • nullsoft winamp 2.0 • nullsoft winamp 2.6 • nullsoft winamp 2.9 • nullsoft winamp 2.10 • nullsoft winamp 2.91 • nullsoft winamp 2.92 • nullsoft winamp 2.95 • nullsoft winamp 5.0 • nullsoft winamp 5.01 • nullsoft winamp 5.1 • nullsoft winamp 5.02 • nullsoft winamp 5.2 • nullsoft winamp 5.3 • nullsoft winamp 5.03 • nullsoft winamp 5.04 • nullsoft winamp 5.05 • nullsoft winamp 5.5 • nullsoft winamp 5.06 • nullsoft winamp 5.07 • nullsoft winamp 5.08c • nullsoft winamp 5.08d • nullsoft winamp 5.08e • nullsoft winamp 5.09 • nullsoft winamp 5.11 • nullsoft winamp 5.12 • nullsoft winamp 5.13 • nullsoft winamp 5.21 • nullsoft winamp 5.22 • nullsoft winamp 5.23 • nullsoft winamp 5.24 • nullsoft winamp 5.31 • nullsoft winamp 5.32 • nullsoft winamp 5.33 • nullsoft winamp 5.34 • nullsoft winamp 5.35 • nullsoft winamp 5.36 • nullsoft winamp 5.51 • nullsoft winamp 5.52 • nullsoft winamp 5.53 • nullsoft winamp 5.54 • nullsoft winamp 5.55 • nullsoft winamp 5.56 • nullsoft winamp 5.57 • nullsoft winamp 5.58 • nullsoft winamp 5.59 • nullsoft winamp 5.61 • nullsoft winamp 5.091 • nullsoft winamp 5.093 • nullsoft winamp 5.094 • nullsoft winamp 5.111 • nullsoft winamp 5.112 • nullsoft winamp 5.531 • nullsoft winamp 5.541 • nullsoft winamp 5.551 • nullsoft winamp 5.552 … and 3 more