Lucene search
RootSSV:26102HistoryDec 24, 2011 - 12:00 a.m.
Winamp 5.x 多个整数溢出漏洞
2011-12-2400:00:00
Root
www.seebug.org
10
EPSS
0.327
Percentile
97.1%
BUGTRAQ ID: 51015
CVE ID: CVE-2011-3834,CVE-2011-4857
Winamp是流行的通用音乐播放器。
Winamp在实现上存在多个整数溢出漏洞，攻击者可利用这些漏洞执行任意代码。
1）当使用流标头分配内存时，in_avi.dll插件中的整数溢出错误可通过特制的AVI文件导致堆缓冲区溢出。
2）在使用RIFF INFO块尺寸值分配内存时，in_avi.dll插件中的整数溢出错误可通过特制的AVI文件导致堆缓冲区溢出。
0
Nullsoft Winamp 5.x
厂商补丁：
Nullsoft
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
openvas
openvas
Winamp AVI And IT Files Parsing Buffer Overflow Vulnerabilities
2011-12-22 00:00:00
Winamp AVI And IT Files Parsing Buffer Overflow Vulnerabilities
2011-12-22 00:00:00
cve
cve
CVE-2011-4857
2011-12-16 19:55:01
CVE-2011-3834
2011-12-16 19:55:00
cvelist
cvelist
CVE-2011-4857
2011-12-16 19:00:00
CVE-2011-3834
2011-12-16 19:00:00
prion
prion
Heap overflow
2011-12-16 19:55:00
Integer overflow
2011-12-16 19:55:00
nvd
nvd
CVE-2011-4857
2011-12-16 19:55:01
CVE-2011-3834
2011-12-16 19:55:00
securityvulns
securityvulns
WinAmp integer overflows
2011-12-12 00:00:00
Secunia Research: Winamp AVI Parsing Two Integer Overflow Vulnerabilities
2011-12-12 00:00:00
checkpoint_advisories
checkpoint_advisories
Nullsoft Winamp RIFF INFO Record Heap Buffer Overflow (CVE-2011-3834)
2012-05-14 00:00:00
Nullsoft Winamp AVI Stream Count Integer Overflow (CVE-2011-3834)
2012-04-16 00:00:00
Nullsoft Winamp RIFF INFO Record Heap Buffer Overflow - Ver2 (CVE-2011-3834)
2014-03-31 00:00:00
seebug
seebug
Winamp 5.x 整数溢出漏洞
2011-12-14 00:00:00
nessus
nessus
Winamp < 5.623 Multiple Integer Overflows
2011-12-21 00:00:00