Nullsoft Winamp自动更新检测缓冲区溢出漏洞

漏洞信息详情

Nullsoft Winamp自动更新检测缓冲区溢出漏洞

CNNVD编号：CNNVD-200212-580
危害等级：中危-->
危害等级：中危
CVE编号： CVE-2002-2195
漏洞类型：缓冲区溢出
发布时间： 2002-12-31
威胁类型：远程
更新时间： 2006-03-17
厂商： nullsoft
漏洞来源： .');">Discovered by 2c79...

漏洞简介

Winamp 2.80及其早期版本的版本自动更新存在缓冲区溢出漏洞。假冒www.winamp.com的远程攻击者可以借助超长服务器响应执行任意代码。

漏洞公告

2c79cbe14ac7d0b8472d3f129fa1df has contributed an unofficial patch which is reported to hardcode the Winamp update site to the static IP address 205.188.245.120. The patch is available as an attachment to the referenced BugTraq post. Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] .

参考网址

来源: BID 名称: 5170 链接:http://www.securityfocus.com/bid/5170 来源: XF 名称: winamp-auto-update-bo(9488) 链接:http://www.iss.net/security_center/static/9488.php

受影响实体

Nullsoft Winamp:2.60:Lite
Nullsoft Winamp:2.61:Full
Nullsoft Winamp:2.62:Standard
Nullsoft Winamp:2.64:Standard
Nullsoft Winamp:2.65

补丁

暂无

正文

Nullsoft Winamp自动更新检测缓冲区溢出漏洞

漏洞信息详情