CVE-2004-0820 Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.
MediumCVSS 4.6
EPSS 2.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nullsoft winamp | = 2.4 | No fix listed |
| nullsoft winamp | = 2.5e | No fix listed |
| nullsoft winamp | = 2.10 | No fix listed |
| nullsoft winamp | = 2.24 | No fix listed |
| nullsoft winamp | = 2.50 | No fix listed |
| nullsoft winamp | = 2.60 | No fix listed |
| nullsoft winamp | = 2.61 | No fix listed |
| nullsoft winamp | = 2.62 | No fix listed |
| nullsoft winamp | = 2.64 | No fix listed |
| nullsoft winamp | = 2.65 | No fix listed |
| nullsoft winamp | = 2.70 | No fix listed |
| nullsoft winamp | = 2.71 | No fix listed |
| nullsoft winamp | = 2.72 | No fix listed |
| nullsoft winamp | = 2.73 | No fix listed |
| nullsoft winamp | = 2.74 | No fix listed |
| nullsoft winamp | = 2.75 | No fix listed |
| nullsoft winamp | = 2.76 | No fix listed |
| nullsoft winamp | = 2.77 | No fix listed |
| nullsoft winamp | = 2.78 | No fix listed |
| nullsoft winamp | = 2.79 | No fix listed |
| nullsoft winamp | = 2.80 | No fix listed |
| nullsoft winamp | = 2.81 | No fix listed |
| nullsoft winamp | = 2.91 | No fix listed |
| nullsoft winamp | = 3.0 | No fix listed |
| nullsoft winamp | = 3.1 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| nullsoft winamp | = 5.01 | No fix listed |
| nullsoft winamp | = 5.02 | No fix listed |
| nullsoft winamp | = 5.03 | No fix listed |
| nullsoft winamp | = 5.04 | No fix listed |
References
- 12381 patch third-party-advisory vendor-advisory
- ESB-2004.0537 patch third-party-advisory vendor-advisory
- www.frsirt.com patch vendor-advisory
- winamp-wsz-execute-code(17124) vdb-entry