View Single Post
  #1  
Old 08-26-2004, 12:59
bukkake's Avatar
bukkake bukkake is offline
VIP
 
Join Date: Aug 2004
Location: /usr/home
Posts: 127
Rept. Given: 2
Rept. Rcvd 14 Times in 3 Posts
Thanks Given: 0
Thanks Rcvd at 3 Times in 2 Posts
bukkake Reputation: 14
Winamp skin security


Just to warn everybody to not use winamp skins from site or people they don't know. There is a serious security issue in the way winamp handle xml formatted skins. Attached is a POC that will execute the file inside the html folder (calc.exe).

There is no fix yet!

New winamp version released that fix Security issue.
Winamp 2.x is not affected, only 3.x and 5.x.
Attached Files
File Type: rar skinhead.rar (172.0 KB, 14 views)