Lucene search
+L

CVE-2004-0820

🗓️ 02 Sep 2004 04:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 59 Views🌐 WEB

Winamp 5.0.4 vulnerability allows remote script execution

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
cvelist
Cvelist
CVE-2004-0820
2 Sep 200404:00
cvelist
exploitdb
Exploit DB
Winamp 5.04 - '.wsz' Skin File Remote Code Execution
25 Aug 200400:00
exploitdb
euvd
EUVD
EUVD-2004-0818
7 Oct 202500:30
euvd
nvd
NVD
CVE-2004-0820
28 Aug 200404:00
nvd
vulncheck_kev
VulnCheck KEV
VulnCheck KEV: CVE-2004-0820
25 Aug 200400:00
vulncheck_kev
nessus
Tenable Nessus
Winamp < 5.0.5 Skin File (.WSZ) Local Zone Arbitrary Code Execution
19 Jan 200500:00
nessus
NVD
Node
OR
nullsoftwinampMatch2.60full
nullsoftwinampMatch2.60lite
nullsoftwinampMatch2.61full
nullsoftwinampMatch2.62standard
nullsoftwinampMatch2.64standard
nullsoftwinampMatch2.70full
nullsoftwinampMatch2.73full
ParameterPositionPathDescriptionCWE
xml/includes.xmlnestedskin.xmlSkin file includes xml/includes.xml which chains to xml/player.xml and xml/player-normal.xml, enabling crafted skin loading
file="player.xml"nestedxml/includes.xmlIncludes player.xml as part of the skin loading process
<include file="player-normal.xml"/>nestedxml/player.xmlIncludes player-normal.xml as part of the skin loading process
url="file:///@SKINPATH@html/test.htm"nestedxml/player-normal.xmlReferences html/test.htm via URL in the skin, enabling potential execution via Local Zone content
<OBJECT NAME='X' CLASSID='CLSID:11111111-1111-1111-1111-111111111123' CODEBASE='file.exe'>nestedhtml/test.htmHTML object loading a local executable, enabling code execution when loaded by the skin

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 22:06Current
7.2High risk
Vulners AI Score7.2
CVSS 24.6
EPSS0.0254
59