CVE-2004-0820
UnknownEPSS 2.54%
Last modified
CVE-2004-0820 is a vulnerability of currently unknown severity. Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.. EPSS estimates a 2.54% chance of exploitation in the next 30 days.
Description
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Nullsoft | Winamp | 2.4 |
| Nullsoft | Winamp | 2.5e |
| Nullsoft | Winamp | 2.10 |
| Nullsoft | Winamp | 2.24 |
| Nullsoft | Winamp | 2.50 |
| Nullsoft | Winamp | 2.60 |
| Nullsoft | Winamp | 2.61 |
| Nullsoft | Winamp | 2.62 |
| Nullsoft | Winamp | 2.64 |
| Nullsoft | Winamp | 2.65 |
| Nullsoft | Winamp | 2.70 |
| Nullsoft | Winamp | 2.71 |
| Nullsoft | Winamp | 2.72 |
| Nullsoft | Winamp | 2.73 |
| Nullsoft | Winamp | 2.74 |
| Nullsoft | Winamp | 2.75 |
| Nullsoft | Winamp | 2.76 |
| Nullsoft | Winamp | 2.77 |
| Nullsoft | Winamp | 2.78 |
| Nullsoft | Winamp | 2.79 |
| Nullsoft | Winamp | 2.80 |
| Nullsoft | Winamp | 2.81 |
| Nullsoft | Winamp | 2.91 |
| Nullsoft | Winamp | 3.0 |
| Nullsoft | Winamp | 3.1 |
| Nullsoft | Winamp | 5.01 |
| Nullsoft | Winamp | 5.02 |
| Nullsoft | Winamp | 5.03 |
| Nullsoft | Winamp | 5.04 |
References
- http://secunia.com/advisories/12381/Patch, Vendor Advisory
- http://www.auscert.org.au/render.html?it=4338Patch, Vendor Advisory
- http://www.frsirt.com/exploits/08252004.skinhead.phpPatch, Vendor Advisory
- http://secunia.com/advisories/12381/Patch, Vendor Advisory
- http://www.auscert.org.au/render.html?it=4338Patch, Vendor Advisory
- http://www.frsirt.com/exploits/08252004.skinhead.phpPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2004-0820?
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.
How severe is CVE-2004-0820?
Severity scoring for CVE-2004-0820 is pending analysis. The EPSS model estimates a 2.54% probability of exploitation in the next 30 days.
How do I fix CVE-2004-0820?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2004
- CVE-2004-0814Multiple race conditions in the terminal layer in Linux 2.4.…
- CVE-2004-0815The unix_clean_name function in Samba 2.2.x through 2.2.11, …
- CVE-2004-0816Integer underflow in the firewall logging rules for iptables…7.5
- CVE-2004-0817Multiple heap-based buffer overflows in the imlib BMP image …
- CVE-2004-0818Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2004-0819The bridge functionality in OpenBSD 3.4 and 3.5, when runnin…
- CVE-2004-0821The CFPlugIn in Core Foundation framework in Mac OS X allows…
- CVE-2004-0822Buffer overflow in The Core Foundation framework (CoreFounda…
- CVE-2004-0823OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 …
- CVE-2004-0824PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local us…
- CVE-2004-0825QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4…
- CVE-2004-0826Heap-based buffer overflow in Netscape Network Security Serv…
Are you affected by CVE-2004-0820?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST