Description
Winamp 3.0 allows remote attackers to cause a denial of service (crash) via .b4s file with a file: argument to the Playstring parameter that contains MS-DOS device names such as aux.
References
- 20030104 WinAmp v.3.0: buffer overflow mailing-list
- winamp-b4s-path-dos(10983) vdb-entry