“Extremely Critical” Exploit Hits Winamp
I don’t use it but Winamp is popular and I pass this along. Desktop Pipeline reports
The popular Winamp music player suffers from a zero-day vulnerability that attackers are already exploiting, a security company warns. A patch is not available.
One possible temporary procedure that they mention
Secunia recommended that users turn to alternate player programs, but Moscow-based Kaspersky Labs said that users could deflect attacks by setting Winamp’s .pls file format to “Confirm open after download” using Windows’ “Folder Options/File Types” dialog.