Description
Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag.
References
- winamp-mp3-id3v2-bo(8946) vdb-entry
- 4609 vdb-entry
- 20020426 Mp3 file can execute code in Winamp [Sandblad advisory #5] mailing-list
- http://www.winamp.com/download/newfeatures.jhtml