Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

nullsoft winamp 2.78 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2002-0546
Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote malicious users to execute script via an ID3v1 or ID3v2 tag in an MP3 file.
Nullsoft Winamp 2.79Nullsoft Winamp 2.78
2.6
CVSSv2
CVE-2002-0284
Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname.
Nullsoft Winamp 2.77Nullsoft Winamp 2.78
6.4
CVSSv2
CVE-2002-2392
Winamp 2.65 up to and including 3.0 stores skin files in a predictable file location, which allows remote malicious users to execute arbitrary code via a URL reference to (1) wsz and (2) wal files that contain embedded code.
Nullsoft Winamp 2.75Nullsoft Winamp 2.77Nullsoft Winamp 2.78Nullsoft Winamp 2.79Nullsoft Winamp 2.80Nullsoft Winamp 3.1Nullsoft Winamp 2.70Nullsoft Winamp 2.71Nullsoft Winamp 2.72Nullsoft Winamp 2.73Nullsoft Winamp 2.65Nullsoft Winamp 2.74Nullsoft Winamp 2.76
5
CVSSv2
CVE-2002-2195
Buffer overflow in the version update check for Winamp 2.80 and previous versions allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response.
Nullsoft Winamp 2.60Nullsoft Winamp 2.61Nullsoft Winamp 2.62Nullsoft Winamp 2.80Nullsoft Winamp 2.65Nullsoft Winamp 2.70Nullsoft Winamp 2.76Nullsoft Winamp 2.79Nullsoft Winamp 2.71Nullsoft Winamp 2.72Nullsoft Winamp 2.73Nullsoft Winamp 2.74Nullsoft Winamp 2.64Nullsoft Winamp 2.75Nullsoft Winamp 2.78
4.6
CVSSv2
CVE-2004-0820
Winamp prior to 5.0.4 allows remote malicious users to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.
Nullsoft Winamp 2.4Nullsoft Winamp 2.50Nullsoft Winamp 2.64Nullsoft Winamp 2.65Nullsoft Winamp 2.70Nullsoft Winamp 2.75Nullsoft Winamp 2.76Nullsoft Winamp 3.0Nullsoft Winamp 3.1Nullsoft Winamp 2.60Nullsoft Winamp 2.61Nullsoft Winamp 2.72Nullsoft Winamp 2.73Nullsoft Winamp 2.79Nullsoft Winamp 2.80Nullsoft Winamp 5.03Nullsoft Winamp 5.04Nullsoft Winamp 2.5eNullsoft Winamp 2.71Nullsoft Winamp 2.77Nullsoft Winamp 2.78Nullsoft Winamp 5.01
4.3
CVSSv2
CVE-2008-3567
Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp prior to 5.541 allows remote malicious users to conduct cross-site scripting (XSS) attacks via an MP3 file with JavaScript in id3 tags.
Nullsoft Winamp 2.50Nullsoft Winamp 2.5eNullsoft Winamp 2.70Nullsoft Winamp 2.71Nullsoft Winamp 2.78Nullsoft Winamp 2.79Nullsoft Winamp 3.1Nullsoft Winamp 5.0Nullsoft Winamp 5.04Nullsoft Winamp 5.05Nullsoft Winamp 5.09Nullsoft Winamp 5.091Nullsoft Winamp 5.13Nullsoft Winamp 5.2Nullsoft Winamp 5.32Nullsoft Winamp 5.33Nullsoft Winamp 5.53Nullsoft WinampNullsoft Winamp 2.0Nullsoft Winamp 2.62Nullsoft Winamp 2.64Nullsoft Winamp 2.74
9.3
CVSSv2
CVE-2009-1831
The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp prior to 5.552 allows remote malicious users to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.
Nullsoft Winamp 5.09Nullsoft Winamp 5.08eNullsoft Winamp 5.03aNullsoft Winamp 5.03Nullsoft Winamp 2.95Nullsoft Winamp 3.0Nullsoft Winamp 2.78Nullsoft Winamp 2.75Nullsoft Winamp 2.65Nullsoft Winamp 2.64Nullsoft Winamp 2.10Nullsoft Winamp 2.50Nullsoft Winamp 2.4Nullsoft Winamp 5.52Nullsoft Winamp 5.35Nullsoft Winamp 5.08Nullsoft Winamp 5.093Nullsoft Winamp 5.091Nullsoft Winamp 5.22Nullsoft Winamp 5.21Nullsoft Winamp 5.07Nullsoft Winamp 5.06
10
CVSSv2
CVE-2009-0263
Multiple buffer overflows in Winamp 5.541 and previous versions allow remote malicious users to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a large invalid value in an MP3 file.
Nullsoft Winamp 2.24Nullsoft Winamp 2.10Nullsoft Winamp 2.62Nullsoft Winamp 2.64Nullsoft Winamp 5.0Nullsoft Winamp 3.1Nullsoft Winamp 2.73Nullsoft Winamp 2.91Nullsoft Winamp 2.75Nullsoft Winamp 2.76Nullsoft Winamp 5.08dNullsoft Winamp 5.08cNullsoft Winamp 5.08Nullsoft Winamp 5.01Nullsoft Winamp 5.5Nullsoft Winamp 5.51Nullsoft Winamp 5.112Nullsoft Winamp 5.31Nullsoft Winamp 5.52Nullsoft Winamp 5.53Nullsoft Winamp 2.5eNullsoft Winamp 2.60
9.3
CVSSv2
CVE-2009-3995
Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp prior to 5.57, and libmikmod 3.1.12, might allow remote malicious users to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file...
Nullsoft Winamp 5.551Nullsoft Winamp 5.531Nullsoft Winamp 5.51Nullsoft Winamp 5.55Nullsoft Winamp 5.08dNullsoft Winamp 5.08cNullsoft Winamp 5.01Nullsoft Winamp 2.80Nullsoft Winamp 2.91Nullsoft Winamp 2.73Nullsoft Winamp 2.76Nullsoft Winamp 2.60Nullsoft Winamp 2.6xNullsoft Winamp 2.0Nullsoft Winamp 2.62Nullsoft Winamp 2.64Nullsoft Winamp 2.92Nullsoft Winamp 2.9Nullsoft Winamp 5.1Nullsoft Winamp 5.08Nullsoft Winamp 5.093Nullsoft Winamp 5.091
9.3
CVSSv2
CVE-2009-3996
Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp prior to 5.57, and libmikmod 3.1.12, might allow remote malicious users to execute arbitrary code via an Ultratracker file.
Nullsoft Winamp 5.551Nullsoft Winamp 5.531Nullsoft Winamp 5.51Nullsoft Winamp 5.55Nullsoft Winamp 5.07Nullsoft Winamp 5.08cNullsoft Winamp 5.0.2Nullsoft Winamp 5.01Nullsoft Winamp 2.80Nullsoft Winamp 2.73Nullsoft Winamp 2.74Nullsoft Winamp 2.60Nullsoft Winamp 2.6xNullsoft Winamp 2.0Nullsoft Winamp 2.64Nullsoft Winamp 2.70Nullsoft Winamp 2.9Nullsoft Winamp 5.1Nullsoft Winamp 5.08Nullsoft Winamp 5.091Nullsoft Winamp 5.21Nullsoft Winamp 5.24
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook