Lucene search
MitreCVE-2004-0820HistorySep 02, 2004 - 4:00 a.m.
CVE-2004-0820
2004-09-0204:00:00
mitre
web.nvd.nist.gov
23
cve-2004-0820
winamp
vulnerability
remote execution
script
html
xml
.wsz skin file
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
High
EPSS
0.233
Percentile
96.6%
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.
Affected configurations
Node
nullsoftwinampMatch2.4
ORnullsoftwinampMatch2.5e
ORnullsoftwinampMatch2.10
ORnullsoftwinampMatch2.24
ORnullsoftwinampMatch2.50
ORnullsoftwinampMatch2.60full
ORnullsoftwinampMatch2.60lite
ORnullsoftwinampMatch2.61full
ORnullsoftwinampMatch2.62standard
ORnullsoftwinampMatch2.64
ORnullsoftwinampMatch2.64standard
ORnullsoftwinampMatch2.65
ORnullsoftwinampMatch2.70
ORnullsoftwinampMatch2.70full
ORnullsoftwinampMatch2.71
ORnullsoftwinampMatch2.72
ORnullsoftwinampMatch2.73
ORnullsoftwinampMatch2.73full
ORnullsoftwinampMatch2.74
ORnullsoftwinampMatch2.75
ORnullsoftwinampMatch2.76
ORnullsoftwinampMatch2.77
ORnullsoftwinampMatch2.78
ORnullsoftwinampMatch2.79
ORnullsoftwinampMatch2.80
ORnullsoftwinampMatch2.81
ORnullsoftwinampMatch2.91
ORnullsoftwinampMatch3.0
ORnullsoftwinampMatch3.1
ORnullsoftwinampMatch5.01
ORnullsoftwinampMatch5.02
ORnullsoftwinampMatch5.03
ORnullsoftwinampMatch5.04
| Vendor | Product | Version | CPE |
|---|---|---|---|
| nullsoft | winamp | 2.4 | cpe:2.3:a:nullsoft:winamp:2.4:*:*:*:*:*:*:* |
| nullsoft | winamp | 2.5e | cpe:2.3:a:nullsoft:winamp:2.5e:*:*:*:*:*:*:* |
| nullsoft | winamp | 2.10 | cpe:2.3:a:nullsoft:winamp:2.10:*:*:*:*:*:*:* |
| nullsoft | winamp | 2.24 | cpe:2.3:a:nullsoft:winamp:2.24:*:*:*:*:*:*:* |
| nullsoft | winamp | 2.50 | cpe:2.3:a:nullsoft:winamp:2.50:*:*:*:*:*:*:* |
| nullsoft | winamp | 2.60 | cpe:2.3:a:nullsoft:winamp:2.60:*:full:*:*:*:*:* |
| nullsoft | winamp | 2.60 | cpe:2.3:a:nullsoft:winamp:2.60:*:lite:*:*:*:*:* |
| nullsoft | winamp | 2.61 | cpe:2.3:a:nullsoft:winamp:2.61:*:full:*:*:*:*:* |
| nullsoft | winamp | 2.62 | cpe:2.3:a:nullsoft:winamp:2.62:*:standard:*:*:*:*:* |
| nullsoft | winamp | 2.64 | cpe:2.3:a:nullsoft:winamp:2.64:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2004-0820
2004-09-02 04:00:00
exploitdb
exploitdb
Winamp 5.04 - '.wsz' Skin File Remote Code Execution
2004-08-25 00:00:00
nvd
nvd
CVE-2004-0820
2004-08-28 04:00:00
nessus
nessus
Winamp < 5.0.5 Skin File (.WSZ) Local Zone Arbitrary Code Execution
2005-01-19 00:00:00
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
High
EPSS
0.233
Percentile
96.6%
Related for CVE-2004-0820