News for hackers. Stuff that matters.

A comment on Google Domains shutting down, assets sold to Squarespace. Parent comment

Re:Google Domains shutting down, assets sold to Squarespace by Dalewyn on Friday June 16, 2023 @04:54AM (#36353501)
The details are all right there: It's a vulnerability with the in_mp3.dll plugin (it's the decoder for playing MP3s), specifically with insufficient checks against malformed name and artist tags (probably ID3 tags?).

It's fixed in Winamp v5.52 and above, and the version I use is v5.531 so I'm not affected as it turns out.

I'm sure there are other bugs that I'm affected by, but again: Not really concerned about it.

[ Parent | on HN ]
Re:Google Domains shutting down, assets sold to Squarespace by dumpsterdiver on Friday June 16, 2023 @06:08AM (#36354108)
Yeah, to clarify, the part I wasn't sure about is if it was required to somehow integrate your local Winamp installation with the streaming service, or if it could be exploited simply by playing a downloaded music file. It sounds like it could indeed be exploited without being connected to the service.
[ Parent | on HN ]