CVE-2002-0284
https://notcve.org/view.php?id=CVE-2002-0284
Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname. Winamp 2.78 y 2.77, cuando abre un fichero wma (windows media audio) que necesita una licencia, envía la ruta completa del directorio de ficheros temporales de internet directamente a la página web que procesa la licencia, lo que podría permitir a servidores web maliciosos obtener la ruta. • http://marc.info/?l=bugtraq&m=101408781031527&w=2 •
CVE-2001-0490 – NullSoft Winamp 2.x - AIP Buffer Overflow
https://notcve.org/view.php?id=CVE-2001-0490
Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file. • https://www.exploit-db.com/exploits/20820 http://archives.neohapsis.com/archives/bugtraq/2001-04/0518.html •
CVE-2000-0624 – NullSoft Winamp 2.64 - '.m3u' Playlist Buffer Overflow
https://notcve.org/view.php?id=CVE-2000-0624
Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U playlist. • https://www.exploit-db.com/exploits/20094 http://archives.neohapsis.com/archives/bugtraq/2000-07/0289.html http://www.securityfocus.com/bid/1496 http://www.winamp.com/getwinamp/newfeatures.jhtml https://exchange.xforce.ibmcloud.com/vulnerabilities/4956 •
CVE-2000-0049 – NullSoft Winamp 2.10 - Playlist
https://notcve.org/view.php?id=CVE-2000-0049
Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file. • https://www.exploit-db.com/exploits/19720 http://www.osvdb.org/12022 http://www.securityfocus.com/bid/925 •