CVE-2008-3567

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting (XSS) attacks via an MP3 file with JavaScript in id3 tags.

• nullsoft winamp (<= 5.54) • nullsoft winamp 2.0 • nullsoft winamp 2.4 • nullsoft winamp 2.5e • nullsoft winamp 2.6x • nullsoft winamp 2.7x • nullsoft winamp 2.10 • nullsoft winamp 2.24 • nullsoft winamp 2.50 • nullsoft winamp 2.60 • nullsoft winamp 2.61 • nullsoft winamp 2.62 • nullsoft winamp 2.64 • nullsoft winamp 2.65 • nullsoft winamp 2.70 • nullsoft winamp 2.71 • nullsoft winamp 2.72 • nullsoft winamp 2.73 • nullsoft winamp 2.74 • nullsoft winamp 2.75 • nullsoft winamp 2.76 • nullsoft winamp 2.77 • nullsoft winamp 2.78 • nullsoft winamp 2.79 • nullsoft winamp 2.80 • nullsoft winamp 2.81 • nullsoft winamp 2.90 • nullsoft winamp 2.91 • nullsoft winamp 2.95 • nullsoft winamp 3.0 • nullsoft winamp 3.1 • nullsoft winamp 5.0 • nullsoft winamp 5.0.1 • nullsoft winamp 5.0.2 • nullsoft winamp 5.01 • nullsoft winamp 5.1 • nullsoft winamp 5.02 • nullsoft winamp 5.2 • nullsoft winamp 5.3 • nullsoft winamp 5.03 • nullsoft winamp 5.03a • nullsoft winamp 5.04 • nullsoft winamp 5.05 • nullsoft winamp 5.5 • nullsoft winamp 5.06 • nullsoft winamp 5.07 • nullsoft winamp 5.08 • nullsoft winamp 5.08c • nullsoft winamp 5.08d • nullsoft winamp 5.08e • nullsoft winamp 5.09 • nullsoft winamp 5.11 • nullsoft winamp 5.12 • nullsoft winamp 5.13 • nullsoft winamp 5.21 • nullsoft winamp 5.22 • nullsoft winamp 5.23 • nullsoft winamp 5.24 • nullsoft winamp 5.31 • nullsoft winamp 5.32 … and 12 more