Re: [BuHa-Security] Winamp 5.35 (Infinite) M3U File Inclusion Stack Overflow

[Werner Van Belle]

--nextPart1432445.QMYqCUcDnn
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

> How would you name it? "Winamp 5.35 (Infinite) M3U File Inclusion Stack
> Overflow Exception"?

I actually agree with the original poster. A stack overflow in a client sid=
e=20
program such as winamp could hardly be labeled 'denial of service'. A user=
=20
program is in general not 'a service'. With your definition every segfault=
=20
could be labeled 'denial of service'.

In any case, I liked your new title much better because it is more accurate=
=20
and does not sound as threatening to server administrators as your original=
=20
one :)

With kind regards,

=2D-=20
Dr. Werner Van Belle
http://werner.yellowcouch.org/

--nextPart1432445.QMYqCUcDnn
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQBGsOMY9XjmDqcmiIIRAgsiAKCByfkrWP1udT8mIA5sS5 kOmxKfmgCeJyA3
GP1EZLnW4hmdZeezr+nuud4=
=mAFc
-----END PGP SIGNATURE-----

--nextPart1432445.QMYqCUcDnn--