The nice thing about old, simple software is that the attack vectors are often known publicly and are easy to work around. In the instance of Winamp, older versions of 2.x have a buffer overflow exploit in the playlist parsing. So.. don't load playlists from untrusted sources, something most people never do anyway.