The Register® — Biting the hand that feeds IT

Feeds

Winamp mends trio of old-school security holes

Heap overflow? Winamp? Party like it's 1999

Ensure Ease of Recovery with Asigra’s Agentless Software

An update to Winamp closes a terrible trio of critical security holes in the popular media player application.

The rather old-school vulnerabilities involve a brace of integer overflow cockups in the in_avi.dll plug-in and a heap-based buffer overflow vulnerability in the in_mod.dll plug-in library. All three flaws create a means to inject hostile code into systems running vulnerable versions of the software, which is developed by Nullsoft, a division of AOL Music. Exploits would involve tricking victims into attempting to play malformed media files.

Users are advised to upgrade to version 5.623 of Winamp media player for Windows, as explained in an advisory by security notification firm Secunia here. More details can be found in a post on Winamp's forums here. ®

Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider

Still a great media player IMO

I'm the last to approve of AOL, but my experience of Winamp is far better than that of certain apple shaped media software.

I'm all Linux at home, and am resigned to using iTunes lookalikes (Banshee, Rhythmbox) since I found XMMS2 a pain to find, then set-up on recent versions of Ubuntu and XMMS3 was just not very user-friendly (for my wife).

I still like and use Winamp on Windows machines at work. Their best feature IMO has always been sorting how I want it (Sort by > Path & Filename), but their playlist features are also great. I use it to create playlists for use on my phones, and their support of varied formats is also good. When I re-encoded music to the excellent he-aacv2 format for playback on my phones back in 2007, Winamp was the only player that supported the format.

As for support, once I got my recent defect noticed, it was fixed in what I would call reasonable time and is in the latest version... [aacdec] Detection of parametric stereo for AAC files made with older encoders.

6
0

sucks less balls than itunes

I've paid the $20 or whatever years and years ago and, apart from a few video codecs that it only pretends it knows what to do with, it has stood the test of time for me at least. Excellent media library, converts files, rips to FLAC & mp3, ipod support, etc. not to mention the most consistantly trippy plug-ins.

Cold boot windows, right click a folder in explorer, play in Winamp: >7k tunes load and play in seconds. Try that with itunes or WMP. It can even make a half-decent go at randomising a playlist instead of just the lame 'shuffle' play option. (all are lame IMO if you have 'too many' tunes)

PS: Anyone that installs anything by fast-clicking next next next deserves everything they get.

5
0
Anonymous Coward

What about VLC media player?

Or does that just make me sad?

4
0

More from The Register

Bjarne Again: Hallelujah for C++
Plus: Now officially OK to admit you never used STL algorithms
Interwebs taunt Sir Jony over Apple eye candy makeover
Hey Ive, Ive... add more unicorns, willya?
SCO vs. IBM battle resumes over ownership of Unix
Zombie lawsuit back and wants to suck the brains out of Linux
Nuke plants to rely on PDP-11 code UNTIL 2050!
Programmers and their walking sticks converge in Canada
Red Hat to ditch MySQL for MariaDB in RHEL 7
So long, Oracle! Don't let the door hit you on the way out
Shy? Socially inadequate? Fiddling with your phone could help
App 'tells the brutal truth' about social inadequates' chatup lines
Java EE 7 melds HTML5 with enterprise apps
New release arrives with GlassFish, NetBeans support
 breaking news
'Office Facebook' firm Tibbr wants you to PAY for mobe-meetings app
Great idea. Punters won't cough for it though
 breaking news
The only Waze is Google: Ad giant tipped to gobble map app 'for $1.3bn'
Pac-Man-satnav-ish upstart in bidding war with Apple, Facebook
 breaking news
PM Cameron calls for modern, programmable computers! (We think)
IT education musings to G8 chiefs to mystify IT industry