AOL Nullsoft Winamp S3M Module "IN_MOD.DLL" Remote Heap Memory Corruption

To: SBUGTRAQ <bugtraq@xxxxxxxxxxxxxxxxx>, FULLDISC <full-disclosure@xxxxxxxxxxxxxxxxx>, dailydave@xxxxxxxxxxxxxxxxxxxxx, vuln@xxxxxxxxxxx
Subject: AOL Nullsoft Winamp S3M Module "IN_MOD.DLL" Remote Heap Memory Corruption
From: Piotr Bania <bania.piotr@xxxxxxxxx>
Date: Fri, 06 Apr 2007 11:47:04 +0200
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:user-agent:mime-version:to:subject:content-type:content-transfer-encoding; b=EJhyOJNSIygxZl1gdsC+EvzcImsWGYaddJpxexBdz5YbZJOdfX0biHC+EcF/KK8KZHop4OMqu53z/+/Mf1k8vmGzZG1QHUp+9CT5hdf8bhHzJFhAjyyYJNsynvuueyf6IWq1qTiXymjhmSDvowGSjB2nTP0IRR2kR3Ne2l+p3yQ=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:user-agent:mime-version:to:subject:content-type:content-transfer-encoding; b=bnA90MhAnfEnyIBeHdEn3fxKdUkPzrgCs+2shT05l/ufAtjsH/nlNUIGniPTOJcWJVYyjNmetduSdIbFqburuedux90L2TC5L1LSkeYQJI6uvLyXJKN6W5JH5JBau5e3BdaD1EuKbR+46GXFY6a2Ixd0guz5v+Bi5aQX17i3XSI=
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
User-agent: Thunderbird 1.5.0.10 (Windows/20070221)

AOL Nullsoft Winamp S3M Module "IN_MOD.DLL" Remote Heap Memory Corruption
by Piotr Bania <bania.piotr@xxxxxxxxx>
http://www.piotrbania.com


Severity:               Important - Potencial remote code execution.

Software affected: Tested on AOL Nullsoft Winamp v5.33 (x86) Feb 132007 (on Windows XP SP1/SP2).

Orginal url:http://www.piotrbania.com/all/adv/nullsoft-winamp-s3m_module-in_mod-adv.txt




best regards,
pb


--
--------------------------------------------------------------------
Piotr Bania - <bania.piotr@xxxxxxxxx> - 0xCD, 0x19
Fingerprint: 413E 51C7 912E 3D4E A62A  BFA4 1FF6 689F BE43 AC33
http://www.piotrbania.com  - Key ID: 0xBE43AC33
--------------------------------------------------------------------

              - "The more I learn about men, the more I love dogs."

Prev by Date: AOL Nullsoft Winamp LIBSNDFILE.DLL Remote Memory Corruption (Off By Zero)
Next by Date: AOL Nullsoft Winamp IT Module "IN_MOD.DLL" Remote Heap Memory Corruption
Previous by thread: AOL Nullsoft Winamp LIBSNDFILE.DLL Remote Memory Corruption (Off By Zero)
Next by thread: AOL Nullsoft Winamp IT Module "IN_MOD.DLL" Remote Heap Memory Corruption
Index(es):
- Date
- Thread