Beware That WinAmp Skin

Compromised WinAmp skin can execute arbitrary programs.

Security researchers at K-Otik discovered a vulnerability in Nullsofts WinAmp media player that can allow hackers to execute arbitrary programs.

The exploit takes advantage of insufficient restrictions on WinAmp skin zip files (.wsz). WinAmp versions 3.x and 5.x are susceptible to the flaw.

Read the full story at