Lucene search
HistoryMay 31, 2002 - 4:00 a.m.
CVE-2002-0284
winamp
cve-2002-0284
temporary internet files
security breach
nvd
wma file
license.
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.7%
Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname.
Affected configurations
Node
nullsoftwinampMatch2.77
ORnullsoftwinampMatch2.78
| CPE | Name | Operator | Version |
|---|---|---|---|
| nullsoft:winamp | nullsoft winamp | eq | 2.77 |
| nullsoft:winamp | nullsoft winamp | eq | 2.78 |
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.7%
Related for CVE-2002-0284