CVE-2002-2392

Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to (1) wsz and (2) wal files that contain embedded code.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2024-09-17

Affected products

• Winamp (Nullsoft)

References

• http://seclists.org/bugtraq/2002/Jul/0205.html
• http://www.iss.net/security_center/static/9630.php
• http://www.securityfocus.com/bid/5266