Description
Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursively includes itself.
References
- 20070801 Re: [BuHa-Security] Winamp 5.35 (Infinite) M3U File Inclusion Stack Overflow mailing-list
- http://morph3us.org/advisories/20070730-winamp-5.35.txt
- 3040 third-party-advisory
- 20070801 Re: Re: [BuHa-Security] Winamp 5.35 (Infinite) M3U File Inclusion DoS Vulnerability mailing-list
- oval:org.mitre.oval:def:15504 vdb-entry signature
- 20070731 [BuHa-Security] Winamp 5.35 (Infinite) M3U File Inclusion DoS Vulnerability mailing-list
- 20070731 Re: [BuHa-Security] Winamp 5.35 (Infinite) M3U File Inclusion DoS Vulnerability mailing-list