Media player hit by critical buffer overflow flaw
vnunet.com, 31 Jan 2006
Winamp has published a security update to fix a critical vulnerability in its media player.
The move came after a security researcher known only as 'Kozan' discovered a flaw in Winamp 5.12 that could be exploited to compromise users' systems. Proof of concept code was published on Sunday.
Attackers could exploit the flaw through a specially crafted playlist file. On opening the file the flaw results in a buffer overflow, allowing remote hackers to launch applications and take control of compromised systems.
The vulnerability effectively allows the attacker to turn the computer into a zombie system or steal data from the system's hard drive.
Security firm Secunia gave the flaw its most severe security rating of 'extremely critical'.
The free Winamp media player is owned by AOL, and the vulnerability has been confirmed only for version 5.12.
Users launching the application will automatically be prompted to update to version 5.13, an AOL spokesperson told vnunet.com. Alternatively they can download the updated application from the Winamp website.
IT security staff are better qualified and taken more seriously
Media player chokes on 'critical' security update
Firm's software 'can no longer be considered a bastion of security', claims analyst
First Looks Editor Ian Williams gets hands on with the Sony Ericsson Xperia X1
Surviving veterans of the code-breaking facility to receive badge of...
Telco begins major rollout in 69 locations across the UK
Do you agree?
Have your say on this article