Revision Date: | 2014-04-07 | Version: | 7 |
Title: | Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 |
Description: | Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for (1) the number of streams or (2) the size of the RIFF INFO chunk, leading to a heap-based buffer overflow. |
Family: | windows | Class: | vulnerability |
Status: | ACCEPTED | Reference(s): | CVE-2011-3834
|
Platform(s): | Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP
| Product(s): | Winamp
|
Definition Synopsis |
Winamp is installed AND Check if Winamp version is less than 5.6.2.3199
AND Check if plugin file in_avi.dll is present
|