Winamp & Shoutcast Forums

Winamp & Shoutcast Forums (http://forums.winamp.com/index.php)
-   Winamp Technical Support (http://forums.winamp.com/forumdisplay.php?f=11)
-   -   "gen_ff.dll Buffer Overflow Vulnerability" ?! (http://forums.winamp.com/showthread.php?t=322302)

bta489 9th September 2010 14:18

"gen_ff.dll Buffer Overflow Vulnerability" ?!
 
Hi,
i've got problems with winamp. It started yesterday when winamp refused to start. I clicked the .exe but nothing happened at all. So i tried a 'solution' found on google and removed 'winamp.ini' but still no change. Then I figured out that my problem has something to do with plugins since winamp did start after removing the 'Plugins'-Folder from the installation-folder. So I copied the plugins back one by one till I figured out that 'gen_ff.dll' was causing all the trouble. Another research on Google provided THIS shady website.
Being not experienced in programming I don't exactly get what this document says (in addition english is not my primary language), but I figured out that some code inside 'mcvcore.maki' would do something that was not intended. So I renamed the file and tried to start winamp. And it worked! besides the message that winamp couldn't find this file everything is quite 'back to normal'.

So have I been a victim of hackers who put that code inside the 'mcvcore.maki'-file? Is there a solution? Is the danger removed with the maki-file?

DrO 9th September 2010 14:29

that vulnerability was fixed in 5.552
Quote:

Winamp 5.552
* Fixed: [gen_ff] memcpy integer overflow vulnerability in maki script loading
the mcvcore.maki file is a main part of the bento based skins so not having it present will prevent them from working properly. the best solution to initially see what's going on as it's a skin issue is to install the current Winamp client (5.581 at the moment) as that will remove the skin and re-install it to a known state.

if the issue with a crash continues then it could be an issue with studio.xnf (usually stored in %appdata%\Winamp) which can occassionally get corrupted and cause gen_ff related crashes. so i'd then suggest trying to remove that.

if the issue still happens then it might be a conflict with something else so we'd need to see a plug-ins list -> http://forums.winamp.com/showthread....161361#plugins before going onto try removing specific plug-ins or doing a full clean un-install and re-install (_don't do that for the moment).

-daz

bta489 9th September 2010 14:54

Great!

Re-installing worked. :up: Now i can continue to use my favourite music-player :D
Thank you very much.

DrO 9th September 2010 15:32

that's a relief a simple re-install worked :)

-daz


All times are GMT. The time now is 03:09.

Copyright © 1999 - 2010 Nullsoft. All Rights Reserved.