WinAmp MIDI File Handling Buffer Overflow Vulner

[Wiz Feinberg]

WinAmp MIDI File Handling Buffer Overflow Vulnerability

Secunia Advisory: SA20722
Advisory Release Date: 2006-06-21
Last Update: 2006-06-22

Critical: Highly critical
Impact: DoS
System access
Where: From remote
Solution Status: Vendor Patch

Software: Winamp 5.x

Description:
BassReFLeX has discovered a vulnerability in WinAmp, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is cause due to a boundary error within the MIDI plug-in (in_midi.dll) when handling MIDI files. This can be exploited to cause a heap-based buffer overflow via a malicious ".mid" file with a specially crafted header.

Successful exploitation may allow execution of arbitrary code.

The vulnerability has been confirmed in version 5.23 and has also been reported in version 5.21. Other versions may also be affected.

NOTE: The vulnerability may be related to one reported by Fortinet Security Research Team.

Solution:
Update to version 5.24. http://www.winamp.com/player/index.php

------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
<small>Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage.
Learn about current computer virus and security threats here.
Read Wiz's Blog for security news and update notices</small>

[Earnest Bovine]

MIDI buffer overflow! I haven't heard that in a while. It was MIDI buffer overflow that got me re-writing the MIDI interrupt handling routines on the Atari ST, learning assembly language (68000), etc etc ... wasting 5 years of my life.