CVEvulnerability

CVE-2004-0820

4.6 MEDIUM Published 2004-08-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-08-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.

Affected configurations

• nullsoft winamp 2.4 • nullsoft winamp 2.5e • nullsoft winamp 2.10 • nullsoft winamp 2.24 • nullsoft winamp 2.50 • nullsoft winamp 2.60 • nullsoft winamp 2.61 • nullsoft winamp 2.62 • nullsoft winamp 2.64 • nullsoft winamp 2.65 • nullsoft winamp 2.70 • nullsoft winamp 2.71 • nullsoft winamp 2.72 • nullsoft winamp 2.73 • nullsoft winamp 2.74 • nullsoft winamp 2.75 • nullsoft winamp 2.76 • nullsoft winamp 2.77 • nullsoft winamp 2.78 • nullsoft winamp 2.79 • nullsoft winamp 2.80 • nullsoft winamp 2.81 • nullsoft winamp 2.91 • nullsoft winamp 3.0 • nullsoft winamp 3.1 • nullsoft winamp 5.01 • nullsoft winamp 5.02 • nullsoft winamp 5.03 • nullsoft winamp 5.04

References