The host is installed with Winamp through 5.63 and is prone to an arbitrary code execution vulnerability. A flaw is present in the application, which fails to validate the length of the string loaded from the "link name" and "home url" keys before using them in a pointer call in the library gen_ff.dll. Successful exploitation leads to an invalid pointer dereference condition with possible code execution.