?? 3088.txt
字號:
Rule:--Sid:3088--Summary:This event is generated when an attempt is made to exploit a client bufferoverflow associated with Winamp's processing of a filename with anextension of .cda.--Impact:A successful attack may permit a buffer overflow that allows the executionof arbitrary code at the privilege level of the user running Winamp.--Detailed Information:Winamp is a media file player for Windows developed by Nullsoft. A bufferoverflow exists because of insufficient bounds checking while handling thename of a CD audio format file (.cda extension) or a playlist that containsa filename with a .cda extension. An overly long name may cause the bufferoverflow permitting the execution of arbitrary code at the privilege levelof the user running Winamp.--Affected Systems: Winamp 3.x, and 5.x--Attack Scenarios:An attacker can create and send a malformed .cda filename that may causea buffer overflow and the subsequent execution of arbitrary code on thevulnerable host.--Ease of Attack:Simple.--False Positives:None known.--False Negatives:None known.--Corrective Action:Upgrade to the latest non-affected version of the software.--Contributors:Sourcefire Research TeamJudy Novak <judy.novak@sourcefire.com>--Additional References--
?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -