Integer Overflow Vulnerability in Winamp Plugin

CVE-2011-3834

What is CVE-2011-3834?

The in_avi.dll plugin in Winamp prior to version 5.623 contains multiple integer overflow vulnerabilities that can be exploited by remote attackers. By crafting specific AVI files, attackers can manipulate the number of streams or the size of the RIFF INFO chunk. This manipulation may lead to a heap-based buffer overflow, allowing for arbitrary code execution on the affected system, putting users at significant risk. It is crucial to apply updates to mitigate potential exploitation.

References