Winamp RIFF INFO Chunk Size Memory Allocation AVI File Handling Remote Overflow

Publish date: July 21, 2015
  Severity: CRITICAL
  CVE Identifier: CVE-2011-3834
  Advisory Date: JUL 21, 2015

  DESCRIPTION

Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for (1) the number of streams or (2) the size of the RIFF INFO chunk, leading to a heap-based buffer overflow.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1004889
  Trend Micro Deep Security DPI Rule Name: 1004889 - Winamp RIFF INFO Record Heap Buffer Overflow Vulnerability

  AFFECTED SOFTWARE AND VERSION

  • nullsoft winamp 0.20a
  • nullsoft winamp 0.92
  • nullsoft winamp 1.006
  • nullsoft winamp 1.90
  • nullsoft winamp 2.0
  • nullsoft winamp 2.10
  • nullsoft winamp 2.6
  • nullsoft winamp 2.9
  • nullsoft winamp 2.91
  • nullsoft winamp 2.92
  • nullsoft winamp 2.95
  • nullsoft winamp 5.0
  • nullsoft winamp 5.01
  • nullsoft winamp 5.02
  • nullsoft winamp 5.03
  • nullsoft winamp 5.04
  • nullsoft winamp 5.05
  • nullsoft winamp 5.06
  • nullsoft winamp 5.07
  • nullsoft winamp 5.08c
  • nullsoft winamp 5.08d
  • nullsoft winamp 5.08e
  • nullsoft winamp 5.09
  • nullsoft winamp 5.091
  • nullsoft winamp 5.093
  • nullsoft winamp 5.094
  • nullsoft winamp 5.1
  • nullsoft winamp 5.11
  • nullsoft winamp 5.111
  • nullsoft winamp 5.112
  • nullsoft winamp 5.12
  • nullsoft winamp 5.13
  • nullsoft winamp 5.2
  • nullsoft winamp 5.21
  • nullsoft winamp 5.22
  • nullsoft winamp 5.23
  • nullsoft winamp 5.24
  • nullsoft winamp 5.3
  • nullsoft winamp 5.31
  • nullsoft winamp 5.32
  • nullsoft winamp 5.33
  • nullsoft winamp 5.34
  • nullsoft winamp 5.35
  • nullsoft winamp 5.5
  • nullsoft winamp 5.51
  • nullsoft winamp 5.52
  • nullsoft winamp 5.53
  • nullsoft winamp 5.531
  • nullsoft winamp 5.54
  • nullsoft winamp 5.541
  • nullsoft winamp 5.55
  • nullsoft winamp 5.551
  • nullsoft winamp 5.552
  • nullsoft winamp 5.56
  • nullsoft winamp 5.57
  • nullsoft winamp 5.572
  • nullsoft winamp 5.58
  • nullsoft winamp 5.581
  • nullsoft winamp 5.6
  • nullsoft winamp 5.622

Featured Stories