Winamp Security Exploit Advisory

2004-04-07 08:33:54

The news from Winamp site here (moderate risk  )

confirmed by NGSSoftware here (high risk  )

Winamp Security Exploit Advisory

Reply #1 – 2004-04-07 08:43:17

Hmmm... in_mod... wasn't that maintained by X-Fixer at some point?

Winamp Security Exploit Advisory

Reply #2 – 2004-04-07 09:35:32

my site, Winamp Unlimited has a more complete set of information (more links, explanation), if you want to check it out.

all winamp 2.91-5.02 users are advised to upgrade to 5.03, which fixes this exploit.

Winamp Security Exploit Advisory

Reply #3 – 2004-04-07 10:17:57

I think it's a trick everybody to use only the newest winamp that costs money.

Winamp Security Exploit Advisory

Reply #4 – 2004-04-07 10:20:01

Isn't it easier to just replace in_mod instead the whole winamp? 

Winamp Security Exploit Advisory

Reply #5 – 2004-04-07 10:29:50

@ Fincoder
Winamp 5.03 does not require any sort of payment to use, unless you want unlimited speeds for ripping/burning.

@Mark7
Here are directions to patch your Winamp, if you can't download/upgrade to the 5.03:

1. Right click the Winamp player, go to 'Options' and then to
'Preferences...'.
2. In the new window which loads, go to 'Plug-ins' and 'Input'.
3. Look for the input plug-in items 'Nullsoft Module Decoder' and double
click it to bring up the 'Nullsoft Module Decoder Preferences' window.
4. Select the 'Fasttracker 2' loader and deselect the 'Enabled' checkbox to
the right of the loaders list.
5. Close all of the option windows and return to the main player.