CVE-2006-0476
Nullsoft Winamp 5.12 - Buffer Overflow via Playlist File1 Field
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2006-0476.
PoCs published by Metasploit, Umesh Wanve, H D Moore, including Metasploit module exploits/windows/browser/winamp_playlist_unc.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Winamp (CVE-2006-0476) by delivering a malicious playlist file via HTTP. The payload is embedded in a UNC path with an overly long computer name, triggering a stack-based overflow when parsed by Winamp.
Description
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).
Exploits (5)
This exploit targets a buffer overflow vulnerability in Winamp (CVE-2006-0476) by delivering a malicious playlist file via HTTP. The payload is embedded in a UNC path with an overly long computer name, triggering a stack-based overflow when parsed by Winamp.
This exploit targets a buffer overflow vulnerability in Winamp 5.12 by crafting a malicious playlist file with a long UNC path. It uses a jump-to-ESP technique to execute shellcode that launches calc.exe.
This exploit targets a buffer overflow vulnerability in Winamp 5.12 by delivering a malicious playlist file via HTTP. The overflow occurs when a UNC path with an excessively long computer name is processed, allowing arbitrary code execution.
This exploit leverages a buffer overflow in Winamp 5.12 by crafting a malicious .pls playlist file. The payload executes calc.exe as a proof-of-concept, demonstrating remote code execution via a specially formatted playlist file.
This Metasploit module exploits a buffer overflow in Winamp by delivering a malicious playlist file via HTTP. The exploit leverages a UNC path with an overly long computer name to trigger the vulnerability, achieving remote code execution.