Published: 29/05/2009 Updated: 29/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 955

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp prior to 5.552 allows remote malicious users to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nullsoft winamp 5.09
nullsoft winamp 5.08e
nullsoft winamp 5.03a
nullsoft winamp 5.03
nullsoft winamp 2.95
nullsoft winamp 3.0
nullsoft winamp 2.78
nullsoft winamp 2.75
nullsoft winamp 2.65
nullsoft winamp 2.64
nullsoft winamp 2.10
nullsoft winamp 2.50
nullsoft winamp 2.4
nullsoft winamp 5.52
nullsoft winamp 5.35
nullsoft winamp 5.08
nullsoft winamp 5.093
nullsoft winamp 5.091
nullsoft winamp 5.22
nullsoft winamp 5.21
nullsoft winamp 5.07
nullsoft winamp 5.06
nullsoft winamp 5.0.2
nullsoft winamp 5.0.1
nullsoft winamp 2.80
nullsoft winamp 2.81
nullsoft winamp 2.74
nullsoft winamp 2.71
nullsoft winamp 2.60
nullsoft winamp 2.5e
nullsoft winamp 2.0
nullsoft winamp 2.61
nullsoft winamp 5.5
nullsoft winamp 5.51
nullsoft winamp 2.73
nullsoft winamp 5.112
nullsoft winamp 5.12
nullsoft winamp 5.31
nullsoft winamp 5.3
nullsoft winamp
nullsoft winamp 5.08d
nullsoft winamp 5.08c
nullsoft winamp 5.02
nullsoft winamp 5.01
nullsoft winamp 2.90
nullsoft winamp 2.91
nullsoft winamp 2.76
nullsoft winamp 2.70
nullsoft winamp 2.6x
nullsoft winamp 5.541
nullsoft winamp 5.36
nullsoft winamp 5.111
nullsoft winamp 5.1
nullsoft winamp 5.094
nullsoft winamp 5.24
nullsoft winamp 5.23
nullsoft winamp 5.05
nullsoft winamp 5.04
nullsoft winamp 5.0
nullsoft winamp 3.1
nullsoft winamp 2.79
nullsoft winamp 2.7x
nullsoft winamp 2.72
nullsoft winamp 2.77
nullsoft winamp 2.62
nullsoft winamp 2.24
nullsoft winamp 5.53
nullsoft winamp 5.54
nullsoft winamp 5.34
nullsoft winamp 5.11
nullsoft winamp 5.2
nullsoft winamp 5.13
nullsoft winamp 5.33
nullsoft winamp 5.32

Debian Bug report logs - #535124 2022 fixes several security issues Package: icedove; Maintainer for icedove is Carsten Schoenert <cschoenert@t-onlinede>; Source for icedove is src:thunderbird (PTS, buildd, popcon) Reported by: Guido Günther <agx@sigxcpuorg> Date: Mon, 29 Jun 2009 21:33:01 UTC Severity: grave ...

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # web site for more information on licensing and terms of use # metasploitcom/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::F ...

#usage: python winamp_maki_scriptpy #Note : I got problem while using this python file under windows,but it works great under ubuntu :p print "**************************************************************************" print " Winamp <= 555 (MAKI script) Universal Seh Overwrite Exploit\n" print " Advisory : vrt-sourcefireblogspotcom/2 ...

# Winamp <= 555 (MAKI script) Universal Integer Overflow Exploit # By: Encrypt3dM!nd # # Based on: milw0rmcom/exploits/8767 # # place "mcvcoremaki" on "\Winamp\Skins\Bento\scripts" and run winmap # # NOTE:i've tested this on version 551,if it isn't workin' with your version # just edit the calculations of the chars # header = ...

/************************************************************** Winamp 5551 MAKI Parsing Integer Overflow Exploit !!! Tested on :Vista sp1 and Xpsp3 Release Date :May 22 2009 Venders web site :wwwwinampcom/ Version Tested:Winamp 5551 Not vulnerable :Winamp 5552 Credits to Monica Sojeong Hong down at vrt-sourcefire for the overflow ht ...

/* Winamp 5551 MAKI Parsing Integer Overflow Vulnerability This is just a simple poc code to show how to exploit the recent MAKI file parsing vulnerability Tested on :Vista sp1 and Xpsp3 Release Date :May 22 2009 Venders web site :wwwwinampcom/ Version Teasted:Winamp 5551 Not vulnerable :Winamp 5552 Im not going into any real detail ...

CWE-189 http://www.securityfocus.com/bid/35052 http://vrt-sourcefire.blogspot.com/2009/05/winamp-maki-parsing-vulnerability.html https://exchange.xforce.ibmcloud.com/vulnerabilities/50664 https://www.exploit-db.com/exploits/8783 https://www.exploit-db.com/exploits/8772 https://www.exploit-db.com/exploits/8770 https://www.exploit-db.com/exploits/8767 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15683 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=535124 https://nvd.nist.gov https://www.exploit-db.com/exploits/21256/

CVE-2009-1831

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect