CVE-2008-3567 in WinAmp

Riassunto

di MITRE

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting (XSS) attacks via an MP3 file with JavaScript in id3 tags.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 10/08/2008
• Divulgazione: 10/08/2008
• Moderazione: accettato
• Voce: VDB-43610
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 4.3 (NVD)
• EPSS: 0.01875
• KEV: no
• Attività: molto basso
• Settore: Pharma, Transportation, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-3567
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-3567
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-3567/