Intrusion PreventionNullsoft.Winamp.in_mod.dll.Heap.Overflow
Description
This indicates an attack attempt to exploit a heap-based buffer-overflow vulnerability in Nullsoft Winamp.
The vulnerability is caused by an error when parsing Fasttracker 2 mod media files. It may allow remote attackers to execute arbitrary code by sending a crafted Fasttracker 2 mod media file.
Affected Products
NullSoft Winamp 5.0 2
NullSoft Winamp 5.0 1
NullSoft Winamp 3.1
NullSoft Winamp 3.0
NullSoft Winamp 2.91
Impact
Arbitrary code execution.
Recommended Actions
Update to Winamp version 5.03 or later:
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 14702 |
| Created | Jun 27, 2007 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2004-1896 |
| Exploit Prediction Score | 23.99% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Winamp |