Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-4694. PoCs published by Ayman Sagy, Julien Ahrens.
AI-analyzed exploit summary This exploit generates a malicious winamp.ini file that triggers a buffer overflow in Winamp 5.63, leading to arbitrary code execution via a venetian shellcode technique and egghunter. It supports payloads for adding an admin user or launching calc.exe.
Description
Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk.
Exploits (2)
This exploit generates a malicious winamp.ini file that triggers a buffer overflow in Winamp 5.63, leading to arbitrary code execution via a venetian shellcode technique and egghunter. It supports payloads for adding an admin user or launching calc.exe.
This is a detailed security advisory describing two stack-based buffer overflow vulnerabilities in WinAmp v5.63, including proof-of-concept debug information but no executable exploit code.