Vulnerability in Nullsoft Winamp
CVE-2002-0284
Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname.
EPSS: 0.009 (54.5th percentile) — read the EPSS interpretation.
Affected products
- Nullsoft Winamp — versions 2.77, 2.78
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)