CVE-2004-0820
First published: Sat Aug 28 2004(Updated: )
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Winamp iPod Plugin | =2.64 | |
| Winamp iPod Plugin | =2.24 | |
| Winamp iPod Plugin | =2.70 | |
| Winamp iPod Plugin | =2.50 | |
| Winamp iPod Plugin | =2.72 | |
| Winamp iPod Plugin | =2.73 | |
| Winamp iPod Plugin | =2.60 | |
| Winamp iPod Plugin | =2.75 | |
| Winamp iPod Plugin | =5.02 | |
| Winamp iPod Plugin | =5.01 | |
| Winamp iPod Plugin | =2.62 | |
| Winamp iPod Plugin | =2.65 | |
| Winamp iPod Plugin | =3.1 | |
| Winamp iPod Plugin | =2.76 | |
| Winamp iPod Plugin | =2.80 | |
| Winamp iPod Plugin | =2.91 | |
| Winamp iPod Plugin | =2.74 | |
| Winamp iPod Plugin | =2.71 | |
| Winamp iPod Plugin | =5.04 | |
| Winamp iPod Plugin | =2.78 | |
| Winamp iPod Plugin | =2.81 | |
| Winamp iPod Plugin | =2.77 | |
| Winamp iPod Plugin | =2.5e | |
| Winamp iPod Plugin | =2.4 | |
| Winamp iPod Plugin | =2.61 | |
| Winamp iPod Plugin | =2.10 | |
| Winamp iPod Plugin | =3.0 | |
| Winamp iPod Plugin | =2.70 | |
| Winamp iPod Plugin | =5.03 | |
| Winamp iPod Plugin | =2.79 | |
| Winamp iPod Plugin | =2.60 | |
| Winamp iPod Plugin | =2.64 | |
| Winamp iPod Plugin | =2.73 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2004-0820?
CVE-2004-0820 is classified as a medium severity vulnerability due to its potential for executing arbitrary scripts remotely.
How do I fix CVE-2004-0820?
To fix CVE-2004-0820, upgrade to Winamp version 5.0.4 or later which includes the necessary security patches.
What software versions are affected by CVE-2004-0820?
CVE-2004-0820 affects multiple versions of Winamp including versions 2.24 through 2.91 and 5.01 through 5.03.
What type of vulnerability is CVE-2004-0820?
CVE-2004-0820 is a remote code execution vulnerability that allows attackers to execute arbitrary scripts from specially crafted skin files.
Can CVE-2004-0820 be exploited without user interaction?
Yes, CVE-2004-0820 can be exploited without user interaction if a user opens a malicious skin file.
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/author
- agent/remedy
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/nullsoft
- product/winamp
- canonical/nullsoft winamp
- version/nullsoft winamp/2.4
- version/nullsoft winamp/2.5e
- version/nullsoft winamp/2.10
- version/nullsoft winamp/2.24
- version/nullsoft winamp/2.50
- version/nullsoft winamp/2.60
- version/nullsoft winamp/2.61
- version/nullsoft winamp/2.62
- version/nullsoft winamp/2.64
- version/nullsoft winamp/2.65
- version/nullsoft winamp/2.70
- version/nullsoft winamp/2.71
- version/nullsoft winamp/2.72
- version/nullsoft winamp/2.73
- version/nullsoft winamp/2.74
- version/nullsoft winamp/2.75
- version/nullsoft winamp/2.76
- version/nullsoft winamp/2.77
- version/nullsoft winamp/2.78
- version/nullsoft winamp/2.79
- version/nullsoft winamp/2.80
- version/nullsoft winamp/2.81
- version/nullsoft winamp/2.91
- version/nullsoft winamp/3.0
- version/nullsoft winamp/3.1
- version/nullsoft winamp/5.01
- version/nullsoft winamp/5.02
- version/nullsoft winamp/5.03
- version/nullsoft winamp/5.04