Lucene search
MitreCVE-2008-3441HistoryAug 01, 2008 - 2:41 p.m.
CVE-2008-3441
2008-08-0114:41:00
CWE-94
mitre
web.nvd.nist.gov
29
cve-2008-3441
nullsoft winamp
update authenticity
arbitrary code execution
evilgrade
dns cache poisoning
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.005
Percentile
76.0%
Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
Affected configurations
Node
nullsoftwinampRange<5.24
References
Related
prion
prion
Design/Logic Flaw
2008-08-01 14:41:00
cvelist
cvelist
CVE-2008-3441
2008-08-01 14:00:00
nvd
nvd
CVE-2008-3441
2008-08-01 14:41:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.005
Percentile
76.0%
Related for CVE-2008-3441