Lucene search
+L

CVE-2004-0820

🗓️ 02 Sep 2004 04:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 53 Views🌐 WEB

Winamp 5.0.4 vulnerability allows remote script execution

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
cvelist
Cvelist
CVE-2004-0820
2 Sep 200404:00
cvelist
exploitdb
Exploit DB
Winamp 5.04 - '.wsz' Skin File Remote Code Execution
25 Aug 200400:00
exploitdb
euvd
EUVD
EUVD-2004-0818
7 Oct 202500:30
euvd
nvd
NVD
CVE-2004-0820
28 Aug 200404:00
nvd
vulncheck_kev
VulnCheck KEV
VulnCheck KEV: CVE-2004-0820
25 Aug 200400:00
vulncheck_kev
nessus
Tenable Nessus
Winamp < 5.0.5 Skin File (.WSZ) Local Zone Arbitrary Code Execution
19 Jan 200500:00
nessus
NVD
Node
OR
nullsoftwinampMatch2.60full
nullsoftwinampMatch2.60lite
nullsoftwinampMatch2.61full
nullsoftwinampMatch2.62standard
nullsoftwinampMatch2.64standard
nullsoftwinampMatch2.70full
nullsoftwinampMatch2.73full
ParameterPositionPathDescriptionCWE
xml/includes.xmlnested/skin.xmlSkin references XML includes that may pull in executable HTML components via skin XML, enabling exploitation when loaded by vulnerable Winamp skin processing
skininfonested/skin.xmlSkin references XML includes that may pull in executable HTML components via skin XML, enabling exploitation when loaded by vulnerable Winamp skin processing
authornested/skin.xmlSkin references XML includes that may pull in executable HTML components via skin XML, enabling exploitation when loaded by vulnerable Winamp skin processing
file="player.xml"nested/xml/includes.xmlIncludes another XML file which in turn references HTML that can load local files
<layout>nested/xml/player-normal.xmlXML configuration pointing to a local HTML file to be loaded by the skin potentially enabling local file execution
url="file:///@SKINPATH@html/test.htm"nested/xml/player-normal.xmlXML configuration pointing to a local HTML file to be loaded by the skin potentially enabling local file execution

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 22:06Current
7.2High risk
Vulners AI Score7.2
CVSS 24.6
EPSS0.0254
53