WinAmp music to hackers' ears (read this)

A "highly critical" hole in one of the most-used pieces of software in the world means that audio files will be music to hackers' ears.


The ubiquitous WinAmp program - used to play a huge range of media files - can provide someone with system access simply by getting someone to visit a malicious website . It all has to do with how the software loads Fasttracker 2 ".xm " media files.

http://www.techworld.com/security/ne...fm?NewsID=1343

Deatils about the hole here : http://www.nextgenss.com/advisories/winampheap.txt

-hugs his beepmedia player/xmms combo-

-hugs his impenetrably secure car stereo ;)

-hugs his winamp 5.. ohh crap....

/me goes to update winamp (thats what you all should do out there)

<rant>
Crappy newspapers..
I read this in two Dutch newspapers (spits and metro)
Spits told me something like: No proof of any hacker(s) making use of mentioned hole
Metro headlines: Hackers enjoying winamp hole

Just like this article opens with "WinAmp music to hackers' ears", which could with any fantasy still be considered humorous..

I mean this is not even about mixing up hackers and skiddies..
This is just plain sensationalism..
</rant>

Is there a proof of concept anyone can link to ??

Allready Post!

http://www.antionline.com/showthread...545#post734545

I feel VIOLATED! *Cry*

yet another case of people just clicking away on any stupid thing any body sends them.

already been posted

Thank god Windows Media Player doesnt have any security flaws like that.</sarcasm>

I gotta go with tedob1 on this one. Some of this stuff you gotta be realy dumb to have exploited against you. Isnt it common sense that if someone you dont know is offering you something that normaly costs for free you should be suspicious?

Quote:

---

Originally posted here by Tiger Shark
-hugs his impenetrably secure car stereo ;)

---

You live near Detroit and think a car stereo is secure?!?!?!?!?!?!?!?!?!

And the hell with Winamp. Everyone uses that and I have no clue why. I use XMMS like Pooh, and of course mpg321 and mpg123, and freeamp, and Alsaplayer. =D


EDIT: Just thought of something:

For the people running Windows 9X that like to click on things that they have no clue about, please visit this link:

http://slipsin.cjb.net

Hear that? That's 9X users crashing ;)

Why use winamp when you can use WMP9!?

I mean... they can control what music you listen to and which movies you watch to make sure that they are "legal". What kind of system would let you break the law?! WMP9 is so good that it won't even let you copy some of your CDs and there is no way that you can be accused of file sharing, when you don't have any files to share!

</sarcastic>

Quote:

---

Originally posted here by phishphreek80
Why use winamp when you can use WMP9!?

I mean... they can control what music you listen to and which movies you watch to make sure that they are "legal". What kind of system would let you break the law?! WMP9 is so good that it won't even let you copy some of your CDs and there is no way that you can be accused of file sharing, when you don't have any files to share!

---

My poor aquatic friend...Tell me you know how to copy music with Windows Media Player... That thing that stops it from copying rarely works, lol.

and as I have edited my original post, remember to click on the link at the bottom if you have Windows 95/98. :)

oops! Forgot the /sarcastic tags. :( lol

/edit: w00t! post 2000. wow... didn't realzie that I wasted so much time on here...

LOL. Yes Phishy, you have more post than me. As do most other seniors now. I guess it was because I was gone for a week about a month or so ago. I leave sometimes ;) Just get to busy sometimes to stop by.