Show filters
13 Total Results
Displaying 11-13 of 13
Sort by:
Attacker Value
Unknown
CVE-2004-0820
Disclosure Date: August 28, 2004 (last updated February 22, 2025)
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.
0
Attacker Value
Unknown
CVE-2003-0765
Disclosure Date: September 17, 2003 (last updated February 22, 2025)
The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value.
0
Attacker Value
Unknown
CVE-2002-2392
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to (1) wsz and (2) wal files that contain embedded code.
0
