Nullsoft Winamp自动更新检测缓冲区溢出漏洞

漏洞信息详情

Nullsoft Winamp自动更新检测缓冲区溢出漏洞

• CNNVD编号：CNNVD-200212-580
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2002-2195
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2002-12-31
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2006-03-17
  
• 厂        商：
  
  nullsoft
• 漏洞来源：
  Discovered by 2c79…

Winamp 2.80及其早期版本的版本自动更新存在缓冲区溢出漏洞。假冒www.winamp.com的远程攻击者可以借助超长服务器响应执行任意代码。

2c79cbe14ac7d0b8472d3f129fa1df has contributed an unofficial patch which is reported to hardcode the Winamp update site to the static IP address 205.188.245.120. The patch is available as an attachment to the referenced BugTraq post.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com .
@securityfocus.com>@yahoo.com>

来源: BID
名称: 5170
链接:http://www.securityfocus.com/bid/5170

来源: XF
名称: winamp-auto-update-bo(9488)
链接:http://www.iss.net/security_center/static/9488.php