For all you winamp fan: listen to this>>>>>>>
A serious security flaw reported this week in WinAmp is still unpatched, contrary to the vendor's assurances, according to the researcher who discovered the vulnerability. What's more, exploit code taking advantage of the flaw has begun circulating on the Internet, making attacks simpler to carry out, said security experts.
"It appears that the 'patched' version 5.05 does not fix the buffer overflow issue that we notified Nullsoft about," said Brett Moore, chief technical officer of Security-Assessment.com, in an email to the Bugtraq security mailing list on Wednesday. "We have sent Nullsoft a copy of this email, and hope that they can remedy this problem quickly." Nullsoft did not immediately respond to Techworld's request for comment.
Full story:
http://www.techworld.com/security/ne...fm?NewsID=2694