CVE-2006-5567
EXPLOITEDNullsoft WinAmp - Heap-Based Buffer Overflow via Ultravox Protocol Handler or Lyrics3 Tags
Title source: llmExploitation Summary
CVE-2006-5567 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including cocoruder.
AI-analyzed exploit summary This exploit demonstrates a heap overflow vulnerability in Nullsoft Winamp < 5.31 via the Ultravox protocol. It sets up a malicious server that sends a crafted response with an overly large 'Ultravox-Max-Msg' value, leading to a denial-of-service condition.
Description
Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) ultravox-max-msg header to the Ultravox protocol handler or (2) unspecified Lyrics3 tags.
Exploits (1)
This exploit demonstrates a heap overflow vulnerability in Nullsoft Winamp < 5.31 via the Ultravox protocol. It sets up a malicious server that sends a crafted response with an overly large 'Ultravox-Max-Msg' value, leading to a denial-of-service condition.