Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[511PF]

There is an buffer overflow in the way ID3v2 tags are handled in Windows Media Player and Winamp 2.81 and Winamp 3.0.  This is a a serious vulnerability that allows remote code execution.  The vulnerability is described here:

http://www.foundstone.com/knowledge/randd-advisories-display.html?id=338

Is MediaJukeBox vulnerable?  If so, when should we expect a patch?

Thanks guys.

[John Gateley]

This exploit is targeted at Winamp. We know of no buffer-overruns in  Media Jukebox.

j