Description
The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Winamp MAKI Buffer Overflow
exploit/windows/fileformat/winamp_maki_bof
Exploit-DB 5
- Winamp - MAKI Buffer Overflow (Metasploit) EDB-21256 · local · Sep 12, 2012 · verified
- Winamp 5.551 - MAKI Parsing Integer Overflow EDB-8783 · local · May 26, 2009 · verified
- Winamp 5.551 - MAKI Parsing Integer Overflow (PoC) EDB-8767 · dos · May 22, 2009 · verified
- Winamp 5.55 - MAKI Script Universal Overwrite (SEH) EDB-8770 · local · May 22, 2009 · verified
- Winamp 5.55 - MAKI script Universal Integer Overflow EDB-8772 · local · May 22, 2009 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 35052 vdb-entry
- 8783 exploit
- winamp-maki-overflow(50664) vdb-entry
- http://vrt-sourcefire.blogspot.com/2009/05/winamp-maki-parsing-vulnerability.html
- oval:org.mitre.oval:def:15683 vdb-entry signature
- 8770 exploit
- 8767 exploit
- 8772 exploit