User User name Password  
   
Tuesday 9.2.2010 / 09:13 PM
Search AfterDawn.com:        In English   Suomeksi   På svenska   På norsk
afterdawn.com > news > winamp skin exploit in the wild
Show topics
News
News

WinAMP skin exploit in the wild

26 August 2004 14:04 by Petteri "dRD" Pyyny | 4 comments

WinAMP skin exploit in the wild Security site Secunia has issued a warning about a security exploit using WinAMP skins. The problem is within WinAMP's skin zip files' (.wsz files) insufficient restrictions to control what can be launched from skin file's XML "browser" tag.

With this exploit, a skin file can launch executable programs when used with WinAMP, thus allowing malicious WinAMP skins to be created that can do virtually anything with user's computer. At the moment the solution to the problem is to use some other media player instead of WinAMP. The vulnerability has already been found in the wild.

Source: Secunia

Permalink to this article

Get AfterDawn's news to your favourite feed reader! Share this story with your friends!
 
« Previous news article
Japanese record industry raided
Next news article »
Indie music e-store launched in the UK
 Post your comment
Discuss this article! 
Ghostdog (Senior Member) 27 August 2004 5:12 Send private message to this user   
This doesn´t affect Winamp 2.80, does it?
LlamaKing (Newbie) 27 August 2004 23:16 Send private message to this user   
This issue is now resolved with the latest release of Winamp.

All users are advised to upgrade to Winamp 5.05 asap!
http://www.winamp.com/player/

Changelog:
http://www.winamp.com/player/version_history.php

More info:
http://forums.winamp.com/showthread.php?threadid=191604
http://forums.winamp.com/showthread.php?threadid=190902
LlamaKing (Newbie) 27 August 2004 23:17 Send private message to this user   
News Article: Winamp Security Bulletin
http://www.winamp.com/about/article.php?aid=10605
Toiletman (Senior Member) 28 August 2004 9:01 Send private message to this user   
It doesn't affect you if you don't use skins right?
 Post your comment
 

Subscribe to our newsfeed

Get the latest headlines delivered directly to your favourite RSS reader or content aggregation service by using the links below.

AfterDawn.com: News - RSS feed
Add to Google
Add to My Yahoo!
Add to MyMSN

Search for headlines

Search through our news archive.

Last week's most popular software downloads

Digital video: AfterDawn.com | AfterDawn Forums
Music: MP3Lizard.com
Gaming: Blasteroids.com | Blasteroids Forums | Compare game prices
Software: Software downloads
Blogs: User profile pages
RSS feeds: AfterDawn.com News | Software updates | AfterDawn Forums
International: AfterDawn in Finnish | AfterDawn in Swedish | AfterDawn in Norwegian | download.fi
Navigate: Search | Site map
About us: About AfterDawn Ltd | Advertise on our sites | Rules, Restrictions, Legal disclaimer & Privacy policy
Contact us: Send feedback | Contact our media sales team
 
  © 1999-2010 by AfterDawn Ltd.