3 ms·
The details are all right there: It's a vulnerability with the in_mp3.dll plugin (it's the decoder for playing MP3s), specifically with insufficient checks agai
by Dalewyn 3y ago
The details are all right there: It's a vulnerability with the in_mp3.dll plugin (it's the decoder for playing MP3s), specifically with insufficient checks against malformed name and artist tags (probably ID3 tags?).
It's fixed in Winamp v5.52 and above, and the version I use is v5.531 so I'm not affected as it turns out.
I'm sure there are other bugs that I'm affected by, but again: Not really concerned about it.
- dumpsterdiver 3y agoYeah, to clarify, the part I wasn't sure about is if it was required to somehow integrate your local Winamp installation with the streaming service, or if it could be exploited simply by playing a downloaded music file. It sounds like it could indeed be exploited without being connected to the service.