Winamp exploit poses hacker risk • The Register

Skip to content

Whitepapers

Winamp exploit poses hacker risk

Clear and present danger

By John Leyden • Get more from this author

Posted in Enterprise Security, 31st January 2006 16:31 GMT

Free whitepaper – Avoiding 7 common mistakes of IT security compliance

Hackers have created an exploit targeting a serious security vulnerability in Winamp, the popular media player. Users are strongly urged to update their software to Winamp version 5.13 to guard against attack.

A remotely exploitable buffer overflow bug in version 5.12 of Winamp creates a means for hackers to take over machines running the vulnerable software, providing they can trick users into visiting maliciously constructed websites. A malformed playlist file, containing a filename starting with an overly long computer name, would be automatically downloaded and opened in Winamp because of the security bug. Winamp version 5.12 is confirmed as vulnerable and older versions may also be susceptible to attack. ®

Free whitepaper – Certify your software integrity with Thawte code signing certificates

Whitepapers

The best practices guide for application security

Download to learn about the mandate, the business case, and the executive action plan to jump start an application security program.

Reducing messaging and web security costs with managed services

In this white paper, learn how security costs can be reduced by utilizing managed security services.

Avoiding 7 common mistakes of IT security compliance

This guide covers seven typical IT security compliance errors and outlines the best practices you can immediately apply to your environment to help your company achieve compliance.

Certify your software integrity with Thawte code signing certificates

This guide will show you how Code Signing Certificates are used to secure code that can be downloaded from the Internet. You will also learn how these certificates operate with different software platforms.

The future of SaaS and IT infrastructure management

This report describes the results of a research project designed to explore the current and planned use of IT Infrastructure Management Solutions in North American companies

Search more Resources

Most read

Webcast: Jumpstart your Application Security initiatives

Don’t Miss

Feds: Hospital hacker's 'massive' DDoS averted

Arrest foils 'Devil's Day' scheme

Buggy 'smart meters' open door to power-grid botnet

Grid-burrowing worm only the beginning

Microsoft knew of nasty IE bug a year before attacks

Security delayed or security denied?

BlockMaster SafeStick hardware-encrypted USB drive

Review Tough enough?