Lucene search

K
nvd[email protected]NVD:CVE-2002-0546
HistoryJul 03, 2002 - 4:00 a.m.

CVE-2002-0546

2002-07-0304:00:00
web.nvd.nist.gov
4

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

High

EPSS

0.011

Percentile

84.1%

Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID3v2 tag in an MP3 file.

Affected configurations

Nvd
Node
nullsoftwinampMatch2.78
OR
nullsoftwinampMatch2.79
VendorProductVersionCPE
nullsoftwinamp2.78cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*
nullsoftwinamp2.79cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

High

EPSS

0.011

Percentile

84.1%

Related for NVD:CVE-2002-0546