[link] Winamp Skin Vulnerability

Just tought I shoud post this :blink:

Winamp Skin File Arbitrary Code Execution Vulnerability

#207482

Ooops :wacko:

#207492

Topic moved.

Damn, I won't run my Winamp until it is fixed :S

#207501

Uhm, first of all, "The vulnerability has been confirmed on a fully patched system with Winamp 5.04 using Internet Explorer 6.0 on Microsoft Windows XP SP1." Uhm, SP1 isn't fully patched as far as I know ... I mean, I'm runnin SP2. Does anyone know if this affects SP2??

Secondly ... I don't know about everyone else, but I tend to liken the winamp zip format to unsolicited emails. Personally, I always download the skins and then change the name to zip and look at each one to make sure it's JUST a skin for winamp. I never let my system simply execute the file to auto load winamp.

#207512