CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2002-0284
https://notcve.org/view.php?id=CVE-2002-0284
03 May 2002 — Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname. Winamp 2.78 y 2.77, cuando abre un fichero wma (windows media audio) que necesita una licencia, envía la ruta completa del directorio de ficheros temporales de internet directamente a la página web que procesa la licencia, lo que podría permitir a servidores web mali... • http://marc.info/?l=bugtraq&m=101408781031527&w=2 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2001-1304
https://notcve.org/view.php?id=CVE-2001-1304
03 Aug 2001 — Buffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service (crash) via several HTTP requests with a long (1) user-agent or (2) host HTTP header. • http://archives.neohapsis.com/archives/bugtraq/2001-08/0048.html •
CVSS: 9.8EPSS: 4%CPEs: 2EXPL: 1CVE-2001-0490 – NullSoft Winamp 2.x - AIP Buffer Overflow
https://notcve.org/view.php?id=CVE-2001-0490
24 May 2001 — Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file. • https://www.exploit-db.com/exploits/20820 •
CVSS: 9.8EPSS: 7%CPEs: 1EXPL: 3CVE-2000-0624 – NullSoft Winamp 2.64 - '.m3u' Playlist Buffer Overflow
https://notcve.org/view.php?id=CVE-2000-0624
20 Jul 2000 — Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U playlist. • https://www.exploit-db.com/exploits/20094 •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 1CVE-2000-0049 – NullSoft Winamp 2.10 - Playlist
https://notcve.org/view.php?id=CVE-2000-0049
04 Jan 2000 — Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file. • https://www.exploit-db.com/exploits/19720 •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-1999-1561
https://notcve.org/view.php?id=CVE-1999-1561
20 Aug 1999 — Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server. • http://www.securityfocus.com/archive/1/24852 •