WinAmp Security Alert (All Versions!)

Post by **Derek** » Mon Apr 05, 2004 4:45 pm

Update as soon as possible please!

TechWorld.Com wrote:The ubiquitous WinAmp program - used to play a huge range of media files - can provide someone with system access simply by getting someone to visit a malicious website. It all has to do with how the software loads Fasttracker 2 ".xm" media files.

...

The flaw affects all WinAmps and so the only advice is to upgrade as soon as possible to the new patched version (5.03) on the company's website here.

http://www.techworld.com/security/news/ ... ewsID=1343

InactiveX · Post by **InactiveX** » Tue Apr 06, 2004 1:55 am

Jeez, how long before this one is exploited by hackers, the RIAA, or Lars Ulrich from Metallica?

I can't stand the newer versions of Winamp. They're bloated and very slow to start. I still use v2.80.

You can disable the flaw without upgrading by following the instructions on this page http://www.nextgenss.com/advisories/winampheap.txt

I've just done it on v2.80.

Thanks for the heads-up Derek.

24seven · Post by **24seven** » Tue Apr 06, 2004 5:30 am

Is it true or is it propaganda by Nullsoft to make people use the new versions of winamp?
Has any body tried it?

I’ve been using 5.03 for a while now, so I’m not affected.

Thanks any way Derek

Post by **Derek** » Tue Apr 06, 2004 10:42 am

I'm using WA5 because of the streaming video capability. It works really well!

24seven · Post by **24seven** » Tue Apr 06, 2004 10:57 am

The main feature I use is the media library.
Although I shouldn’t have to as 99% of my music is sorted into directories, it just makes it easier to find a particular song.

kuun · Post by **kuun** » Wed Apr 07, 2004 1:56 pm

i still use version 2.91

i don't like all the excess features..

i like 2.91 because it plays .avi files and mp3's as well.. thats all i need winamp for

besides im behind a router and i don't listen to the streaming mp3's (shoutcast) online anyways