|
Winamp has extremely critical vulnerability
|
View this Thread in Original format
| mentalbarter |
A vulnerability has been reported in Winamp, which can be exploited by malicious people to compromise a user's system.
The problem is caused due to insufficient restrictions on Winamp skin zip files (.wsz). This can e.g. be exploited by a malicious website using a specially crafted Winamp skin to place and execute arbitrary programs. With Internet Explorer this can be done without user interaction.
An XML document in the Winamp skin zip file can reference a HTML document using the "browser" tag and get it to run in the "Local computer zone". This can be exploited to run an executable program embedded in the Winamp skin file using the "object" tag and the "codebase" attribute.
NOTE: The vulnerability is reportedly being exploited in the wild.
The vulnerability has been confirmed on a fully patched system with Winamp 5.04 using Internet Explorer 6.0 on Microsoft Windows XP SP1.
http://www.dancefrontdoor.co.uk/article3274.html
i dont really care, but it might be an issue for some ppl |
|
|
| tribu |
Glad im still using winamp 2.81
| quote: | Originally posted by josh4
dont upgrade though, if u get winamp get winamp3 the other two versions suxx0r |
:haha: :haha: |
|
|
| Matt |
| quote: | Originally posted by josh4
dont upgrade though, if u get winamp get winamp3 the other two versions suxx0r |
uh nooo.... Winamp 3 is the worst of them. Way too heavy on system resources.
WinAmp 5 if you like goodies
WinAmp 2.81 if you like straight-up media playing. |
|
|
| igottaknow |
| i dont allow winamp internet privilages in zonealarm, but thx for the warning i'll d/l the patch anyways |
|
|
| TweeK |
Its only of your using winamp 5 right?
If so can i get a Direct Link to the patch i cant seem to find it:p |
|
|
| MaRt |
| quote: | Originally posted by tribu
Glad im still using winamp 2.81 |
Me too. |
|
|
| ASOT100 |
| quote: | Originally posted by MaRt
Me too. |
me three |
|
|
| itsTrueSonic |
HOW COME no one likes winamp3??
yeah . it is heavy on system resources, because of it's damn media library (what's the purpose for that?? all the player needs to do is read the header of an mp3 file, and you got the artist, song, and length of song.)
the only reasons i like winamp3 is the use of adding multiple playlists, without creating multiple instances or clearing the current playlist; and the beginning of the use of "crossfader"... i like it.. i don't like it's shuffler, because it doesn't shuffle well. they need a new shuffle algorithm.. |
|
|
|
|
