Lucene search
HistoryNov 16, 2005 - 7:37 a.m.
CVE-2003-1274
winamp
remote attack
denial of service
crash
cve-2003-1274
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.6 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.2%
Winamp 3.0 allows remote attackers to cause a denial of service (crash) via .b4s file with a file: argument to the Playstring parameter that contains MS-DOS device names such as aux.
Affected configurations
Node
nullsoftwinampMatch3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| nullsoft:winamp | nullsoft winamp | eq | 3.0 |
Related
nvd
nvd
CVE-2003-1274
2003-12-31 05:00:00
cvelist
cvelist
CVE-2003-1274
2005-11-16 07:37:00
nessus
nessus
Winamp < 3.0b Multiple File Handling DoS
2003-04-14 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.6 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.2%
Related for CVE-2003-1274