Fergie's Tech Blog

Winamp Update Fixes Big Security Hole

Brian Krebs writes on Security Fix:

America Online has released a new update for Winamp that closes a critical security hole in the popular music and video player.

The patch mends a flaw for which instructions were released last week showing would-be attackers how to use it to break into computers running Winamp. If you are using Winamp and want to keep doing so, it's time to download and install the update. All versions prior to the latest release -- version 5.2 -- are vulnerable. Yeah, yeah, I know you just updated a couple of weeks ago, when AOL released a new version to fix other critical security flaws, right? Well, too bad.

The advisory released by the researcher says he discovered the exploit back in July, but AOL only learned of the exploit code's existence this week when a hacker posted his exploit code online.

posted by Fergie @ 2/24/2006 08:09:00 AM