Main
Vulnerability Database
Exploits
ID:4094 - Exploit for Input validation error in Winamp - CVE-2013-4694
ID:4094 - Exploit for Input validation error in Winamp - CVE-2013-4694
Published: August 11, 2020
Vulnerability identifier: #VU41793
Vulnerability risk: Medium
CVE-ID: CVE-2013-4694
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
Winamp
Winamp
Link to public exploit:
Vulnerability description
The vulnerability allows remote attackers to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported.
Remediation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.