WinAmp flayed by skins attack
Print storyExploit circulating for unpatched vuln
Posted in Security, 26th August 2004 12:37 GMT
Free whitepaper – Certify your software integrity with Thawte code signing certificates
Updated A serious security flaw in NullSoft's popular WinAmp player opens the door for crackers to seize control of vulnerable systems.
The vulnerability stems from a flaw in how the player processes Winamp skin zip files. This flaw means WinAmp users induced to visit a maliciously constructed website could find their PCs rooted. The vulnerability has been confirmed on a fully patched system with WinAmp 5.04 using Internet Explorer 6.0 on Microsoft Windows XP SP1. WinAmp 3.x users are also potentially in peril. And that's not the worst of it. The bug, reported by the K-OTik.COM Security Survey Team, is reportedly being actively exploited in the wild.
Update - 31 Aug
Nullsoft has released an updated version of Winamp that addresses the vulnerability. You can download Wainamp version 5.5 here. ®
Related stories
XP audio vuln shout goes out
WinAmp's malicious MP3 vuln
Unholy trio of RealOne Player holes unearthed
CERT recommends anything but IE
Free whitepaper – Securing your Apache web server with a Thawte digital certificate
The best practices guide for application security
Reducing messaging and web security costs with managed services
Avoiding 7 common mistakes of IT security compliance
Certify your software integrity with Thawte code signing certificates
The future of SaaS and IT infrastructure management
Feds: Hospital hacker's 'massive' DDoS averted
Buggy 'smart meters' open door to power-grid botnet
Microsoft knew of nasty IE bug a year before attacks
BlockMaster SafeStick hardware-encrypted USB drive