CVE-2010-4371
Winamp < 5.6 - Buffer Overflow in in_mod Plugin via Comment Box
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2010-4371. PoCs published by Mighty-D & 7eK, Mighty-D, Luigi Auriemma.
AI-analyzed exploit summary This exploit targets a stack overflow vulnerability in Winamp 5.5.8.2985's in_mod plugin. It crafts a malicious .mtm file with a NOP sled, EIP overwrite, and encoded shellcode to achieve remote code execution on Windows XP SP3 without ASLR or DEP bypass.
Description
Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment box.
Exploits (3)
This exploit targets a stack overflow vulnerability in Winamp 5.5.8.2985's in_mod plugin. It crafts a malicious .mtm file with a NOP sled, EIP overwrite, and encoded shellcode to achieve remote code execution on Windows XP SP3 without ASLR or DEP bypass.
This exploit targets a stack overflow vulnerability in Winamp 5.5.8.2985's in_mod plugin, leveraging a crafted header and shellcode to achieve remote code execution. The payload includes a bind shell on port 4444 and handles bad characters through careful manipulation.
This is a detailed writeup by Luigi Auriemma describing multiple integer overflow and buffer overflow vulnerabilities in Winamp plugins (in_mkv, in_nsv, in_midi, in_mod). The document explains the technical details of each vulnerability but does not include actual exploit code.