Vulnerability Development mailing list archives

Re: Winamp Crash


From: Mustafa CANLI <mcanli () ANATOLIA MSIS METU EDU TR>
Date: Sat, 9 Dec 2000 23:22:26 +0200

        It is very clear that winamp crashes ( i suppuse all versions )
when any key marked as id3 goes beyond 150 or more characters.
        But i have an idea about the skin plugin of winamp. If you have
seen the skin bworser and more skins option directly downloads a skin pack
from its website and load it to winamp.
        So with this overflow-crash and javascript based run can we run a
file or a system command from winamp ?

--
Mustafa "daSJoker" CANLI
METU internet society
ASME-Metu web group


Current thread: