PDA

View Full Version : WinAmp Bug



catcorpse
05-01-2002, 10:32 AM
Normaly I woundn't post something like this here, but this is far reaching. How many of you use Winamp? well did you know that there is now a security hole that might let in MP3's with attached virus.
A bug in the code of WinAmp 2.79 allows a specially formed data tag in an MP3 file to cause a buffer overrun in the application, which could be exploited to run any piece of code the attacker wishes you can either disable winamps mini browser or you can update (http://www.winamp.com/) it to the latest edition which dosen't have the problem. Hats off to the Znet (http://zdnet.com.com/2100-1105-895174.html) article!

AmStoned
05-01-2002, 11:36 AM
And installing 2.80 will solve that prob. I hate upgrading stuff.

Tuffie
05-01-2002, 11:43 AM
Thanks CC for the heads up on this :D ,guess it's time for the 2.80 version.

KaraK
05-01-2002, 12:15 PM
saw this over at El Reg the other day.. 2.80 installed and happy :)

Alakazam
05-01-2002, 09:26 PM
After just a couple of days, Nullsoft has released a silent version update of Winamp (dubbed 2.80a), fixing a few small bugs.

Changes in Winamp 2.80a:

PPs output plugin fixes
winampa.exe fix

News source: Betanews (http://www.betanews.com)

Download: Winamp 2.80a Full (http://download.nullsoft.com/winamp/client/winamp280_full.exe) (1.92mb)
Download: Winamp 2.80a Standard (http://download.nullsoft.com/winamp/client/winamp280_std.exe) (1.21mb)
Download: Winamp 2.80a Lite (http://download.nullsoft.com/winamp/client/winamp280_lite.exe) (557kb)

KaraK
05-02-2002, 04:18 AM
thanks for the heads up Zammy... I'll toddle over to winamp.com later and collect!