Description
Multiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted Table of Contents (TOC) in a (1) NSV stream or (2) NSV file that triggers a heap-based buffer overflow.
References
- 42004 third-party-advisory
- http://forums.winamp.com/showthread.php?threadid=159785
- http://forums.winamp.com/showthread.php?t=324322
- 20101201 Secunia Research: Winamp NSV Table of Contents Parsing Integer Overflow mailing-list
- http://secunia.com/secunia_research/2010-127/
- oval:org.mitre.oval:def:12587 vdb-entry signature