Description
Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow.
References
- 42004 third-party-advisory
- http://forums.winamp.com/showthread.php?threadid=159785
- http://forums.winamp.com/showthread.php?t=324322
- oval:org.mitre.oval:def:11841 vdb-entry signature
- 20101221 nSense-2010-005: Winamp mailing-list