Rule:--Sid:3088--Summary:This event is generated when an attempt is made to exploit a client bufferoverflow associated with Winamp's processing of a filename with anextension of .cda.--Impact:A successful attack may permit a buffer overflow that allows the executionof arbitrary code at the privilege level of the user running Winamp.--Detailed Information:Winamp is a media file player for Windows developed by Nullsoft.  A bufferoverflow exists because of insufficient bounds checking while handling thename of a CD audio format file (.cda extension) or a playlist that containsa filename with a .cda extension.  An overly long name may cause the bufferoverflow permitting the execution of arbitrary code at the privilege levelof the user running Winamp.--Affected Systems:	Winamp 3.x, and 5.x--Attack Scenarios:An attacker can create and send a malformed .cda filename that may causea buffer overflow and the subsequent execution of arbitrary code on thevulnerable host.--Ease of Attack:Simple.--False Positives:None known.--False Negatives:None known.--Corrective Action:Upgrade to the latest non-affected version of the software.--Contributors:Sourcefire Research TeamJudy Novak <judy.novak@sourcefire.com>--Additional References--