• info
• discussion
• exploit
• solution
• references

Nullsoft Winamp Skin Predictable File Location Vulnerability

Exploits have been provided by "Jelmer" <jelmer@kuperus.xs4all.nl>. These exploits will run arbitrary code on vulnerable systems, and should be treated appropriately.

http://kuperus.xs4all.nl/winamp.htm
http://kuperus.xs4all.nl/winamp3.htm

Detailed exploit instructions are also provided in the referenced message posts.