• info
• discussion
• exploit
• solution
• references

Zinf Malformed Playlist File Remote Buffer Overflow Vulnerability

Solution:
Fixes are available. Please see the references for details.


Debian Linux 3.0 hppa

• Debian freeamp-extras_2.1.1.0-4woody2_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_hppa.deb


• Debian freeamp_2.1.1.0-4woody2_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_hppa.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_hppa.deb

Debian Linux 3.0 ppc

• Debian freeamp-extras_2.1.1.0-4woody2_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_powerpc.deb


• Debian freeamp_2.1.1.0-4woody2_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_powerpc.deb


• Debian libfreeamp-alsa_2.1.1.0-4woody2_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-alsa _2.1.1.0-4woody2_powerpc.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_powerpc.deb

Debian Linux 3.0 s/390

• Debian freeamp-extras_2.1.1.0-4woody2_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_s390.deb


• Debian freeamp_2.1.1.0-4woody2_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_s390.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_s390.deb

Debian Linux 3.0 arm

• Debian freeamp-extras_2.1.1.0-4woody2_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_arm.deb


• Debian freeamp_2.1.1.0-4woody2_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_arm.deb


• Debian libfreeamp-alsa_2.1.1.0-4woody2_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-alsa _2.1.1.0-4woody2_arm.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_arm.deb

Debian Linux 3.0 alpha

• Debian freeamp-extras_2.1.1.0-4woody2_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_alpha.deb


• Debian freeamp_2.1.1.0-4woody2_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_alpha.deb


• Debian libfreeamp-alsa_2.1.1.0-4woody2_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-alsa _2.1.1.0-4woody2_alpha.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_alpha.deb

Debian Linux 3.0 mips

• Debian freeamp-extras_2.1.1.0-4woody2_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_mips.deb


• Debian freeamp_2.1.1.0-4woody2_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_mips.deb


• Debian libfreeamp-alsa_2.1.1.0-4woody2_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-alsa _2.1.1.0-4woody2_mips.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_mips.deb

Debian Linux 3.0 mipsel

• Debian freeamp-extras_2.1.1.0-4woody2_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_mipsel.deb


• Debian freeamp_2.1.1.0-4woody2_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_mipsel.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_mipsel.deb

Debian Linux 3.0 ia-32

• Debian freeamp-extras_2.1.1.0-4woody2_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_i386.deb


• Debian freeamp_2.1.1.0-4woody2_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_i386.deb


• Debian libfreeamp-alsa_2.1.1.0-4woody2_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-alsa _2.1.1.0-4woody2_i386.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_i386.deb

Debian Linux 3.0 sparc

• Debian freeamp-extras_2.1.1.0-4woody2_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_sparc.deb


• Debian freeamp_2.1.1.0-4woody2_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_sparc.deb


• Debian libfreeamp-alsa_2.1.1.0-4woody2_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-alsa _2.1.1.0-4woody2_sparc.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_sparc.deb

Debian Linux 3.0 m68k

• Debian freeamp-extras_2.1.1.0-4woody2_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_m68k.deb


• Debian freeamp_2.1.1.0-4woody2_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_m68k.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_m68k.deb

Debian Linux 3.0 ia-64

• Debian freeamp-extras_2.1.1.0-4woody2_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_ia64.deb


• Debian freeamp_2.1.1.0-4woody2_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_ia64.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_ia64.deb