NGSSoftware Insight Security Research Advisory #NISR05042004 – Due to a lack of boundary checking within the code responsible for loading Fasttracker 2 (.xm) mod media files by the Winamp media plug-in in_mod.dll, it is possible to make Winamp overwrite arbitrary heap memory and reliably cause an access violation within the ntdll.RtlAllocateHeap() function. When properly exploited this allows an attacker to write any value to a memory location of their choosing. In doing so, the attacker can gain control of Winamp’s flow of execution to run arbitrary code. This code will run in the security context of the logged on user.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33008/winampheap.txt
Source: https://packetstormsecurity.com/files/33008/winampheap.txt.html