Description
The Impulse Tracker (IT) and ScreamTracker 3 (S3M) modules in IN_MOD.DLL in AOL Nullsoft Winamp 5.33 allows remote attackers to execute arbitrary code via a crafted (1) .IT or (2) .S3M file containing integer values that are used as memory offsets, which triggers memory corruption.
References
- 1017886 vdb-entry
- winamp-inmod-code-execution(33480) vdb-entry
- [dailydave] 20070406 AOL Nullsoft Winamp S3M Module "IN_MOD.DLL" Remote Heap Memory Corruption mailing-list
- [dailydave] 20070406 AOL Nullsoft Winamp IT Module "IN_MOD.DLL" Remote Heap Memory Corruption mailing-list
- http://www.piotrbania.com/all/adv/nullsoft-winamp-it_module-in_mod-adv.txt
- ADV-2007-1286 vdb-entry
- 34430 vdb-entry
- 34431 vdb-entry
- http://www.piotrbania.com/all/adv/nullsoft-winamp-s3m_module-in_mod-adv.txt
- 20070406 AOL Nullsoft Winamp IT Module "IN_MOD.DLL" Remote Heap Memory Corruption mailing-list
- 20070406 AOL Nullsoft Winamp S3M Module "IN_MOD.DLL" Remote Heap Memory Corruption mailing-list
- 23350 vdb-entry
- 2532 third-party-advisory