Description
Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service (application crash or CPU consumption) via (1) an mp4 or m4a playlist file that contains invalid tag data or (2) an invalid .nsv or .nsa file.
References
- 11909 vdb-entry
- VU#372968 third-party-advisory
- winamp-nsa-nsv-dos(18467) vdb-entry
- winamp-mp4-m4a-dos(18466) vdb-entry
- 1012525 vdb-entry
- http://forums.winamp.com/showthread.php?s=&threadid=202007
- 20041213 Winamp 5.07 (latest version) Remote Crash + other mailing-list
- 20041213 Winamp 5.07 (latest version) Remote Crash + other stupid shizle mailing-list