Winamp vulnerability : technical study and Exploit released

["ElviS .de" <elvi52001 () yahoo com>]

exploit and technical study of the Winamp flaw posted by k-otik
 
http://www.k-otik.com/exploits/20041124.winampm3u.c.php  
"..the cdda library only reserves 20 bytes for names when files are .cda, so the stack will be overwritten and 
exception occurs when a name looks like aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.cda"
 
but still NO patch from Winamp !!!


                
---------------------------------
Do you Yahoo!?
 Yahoo! Mail - You care about security. So do we.