CVE-2013-4694

Related Files

WinAmp 5.63 Buffer Overflow

Posted Aug 27, 2013

Authored by Ayman Sagy

WinAmp version 5.63 buffer overflow exploit that leverages how skins are handled incorrectly.

tags | exploit, overflow

advisories | CVE-2013-4694

SHA-256 | b7b8323d0f2912432388831222006fc44f18caa39d9dfcb7d498e1994fe67ee5

Download | Favorite | View

WinAmp 5.63 Buffer Overflow

Posted Jul 1, 2013

Authored by Julien Ahrens | Site security.inshell.net

WinAmp version 5.63 suffers from a stack-based buffer overflow vulnerability. The application loads the directories in %PROGRAMFILES%\WinAmp\Skins on startup to determine the skins that have been installed and to list them in the application menu point "Skins" and in the Skins Browser. But the application does not properly validate the length of the directory name before passing it as argument to a lstrcpynW call in the library gen_jumpex.dll, which leads to a buffer overflow condition with possible code execution.

tags | exploit, overflow, code execution

advisories | CVE-2013-4694

SHA-256 | a76ea933b9df26a37cc6888564494cffff7f2cecd9238e9b31fca155cae86ed4

Download | Favorite | View