Secunia Research has discovered a vulnerability in Winamp, which can be exploited by malicious people to compromise a user’s system. The vulnerability is caused by an error in the Module Decoder Plug-in (IN_MOD.DLL) when parsing Ultratracker files and can be exploited to cause a heap-based buffer overflow. Successful exploitation may allow execution of arbitrary code.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/83979/secunia-ultratracker.txt
Source: https://packetstormsecurity.com/files/83979/Winamp-Ultratracker-File-Parsing-Buffer-Overflow.html