CVEvulnerability
CVE-2002-0284
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2002-05-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:P/I:N/A:N
Description
Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname.
Affected configurations
• nullsoft winamp 2.77
• nullsoft winamp 2.78