WinAmp 5.5 closes integer overflow hole

Version 5.5 of WinAmp has been released to close an integer overflow hole in the module that supports the FLAC lossless audio compression format. According to iDefense, the hole could be exploited to cause a buffer overflow, which in turn would allow arbitrary malicious code to be injected.

Those using an older version of WinAmp should therefore be wary of clicking on a FLAC link on the Web. Depending on your specific configuration, your browser may pass the links on directly to win amp.

(mba)