Winamp VP6 content Parsing Stack Overflow Vulnerability and repair measures

Affected Versions:

Nullsoft Winamp 5.x

Vulnerability description:

Bugtraq id: 42591winamp is a popular media player that supports multiple file formats. The vp6.w5s component of Winamp has the stack overflow vulnerability when parsing malformed Flash Video data,

The user is cheated to open the specially crafted FLV file, causing arbitrary code execution.

<* Reference

Http://secunia.com/advisories/40534/
Http://marc.info /? L = bugtraq & m = 127905557831516 & w = 2

*>Security suggestions:

Vendor patch: Nullsoft -------- the current vendor has released the upgrade patch to fix this security problem, please download to the vendor's home page: http://www.winamp.com/help/Version_History#Winamp_5.58