Media player hit by critical buffer overflow flaw
vnunet.com, 31 Jan 2006
Winamp has published a security update to fix a critical vulnerability in its media player.
The move came after a security researcher known only as 'Kozan' discovered a flaw in Winamp 5.12 that could be exploited to compromise users' systems. Proof of concept code was published on Sunday.
Attackers could exploit the flaw through a specially crafted playlist file. On opening the file the flaw results in a buffer overflow, allowing remote hackers to launch applications and take control of compromised systems.
The vulnerability effectively allows the attacker to turn the computer into a zombie system or steal data from the system's hard drive.
Security firm Secunia gave the flaw its most severe security rating of 'extremely critical'.
The free Winamp media player is owned by AOL, and the vulnerability has been confirmed only for version 5.12.
Users launching the application will automatically be prompted to update to version 5.13, an AOL spokesperson told vnunet.com. Alternatively they can download the updated application from the Winamp website.
IT security staff are better qualified and taken more seriously
Media player chokes on 'critical' security update
Firm's software 'can no longer be considered a bastion of security', claims analyst
Remote access - Three steps to getting connected
3.4 million UK professionals now work from home – is your company equipped?
Cost benefits of a global collaboration network
This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications
Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.
We chat to Mike Maddison, UK head of Security, Privacy...
Update designed to give mobile users a richer, more personalised...
More thoughts on how servers can help manage overload
Do you agree?
Have your say on this article