WinAmp bug opens door to MP3 viruses
"A glitch with the popular WinAmp software for playing digital music files could allow an attacker to embed malicious code into an MP3 file, potentially damaging the user's PC and infecting other MP3s.
Nullsoft, which makes WinAmp, has confirmed the vulnerability, which does not affect the newest version of the software. Version 2.80 of WinAmp is available on NullSoft's Web site. The problem can also be fixed by disabling WinAmp's minibrowser."
"A glitch with the popular WinAmp software for playing digital music files could allow an attacker to embed malicious code into an MP3 file, potentially damaging the user's PC and infecting other MP3s.
Nullsoft, which makes WinAmp, has confirmed the vulnerability, which does not affect the newest version of the software. Version 2.80 of WinAmp is available on NullSoft's Web site. The problem can also be fixed by disabling WinAmp's minibrowser."