CVE:CVE-2002-2195
CNNVD:CNNVD-200212-580
Winamp 2.80及其早期版本的版本自动更新存在缓冲区溢出漏洞。假冒www.winamp.com的远程攻击者可以借助超长服务器响应执行任意代码。
solution:Upgrade nullsoft winamp to a higher version than 2.60,2.61,2.62,2.64,2.65,2.70,2.71,2.72,2.73,2.74,2.75,2.76,2.78,2.79,2.80,and avoid the version 2.60,2.61,2.62,2.64,2.65,2.70,2.71,2.72,2.73,2.74,2.75,2.76,2.78,2.79,2.80