CVE-2002-0284 Information disclosure in n/a

What is CVE-2002-0284?

CVE-2002-0284 is a low-severity vulnerability in Nullsoft Winamp, published on 3 May 2002. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname.

Which versions are affected by CVE-2002-0284?

It affects 1 product.

Products include Nullsoft Winamp.

How do I fix CVE-2002-0284?

No fix has been published for CVE-2002-0284 yet. Limit exposure of the affected software until one is available.

Is CVE-2002-0284 being exploited?

There is no known exploitation of CVE-2002-0284 in the wild and no public exploit code.

Other vulnerabilities in Nullsoft Winamp

• CVE-2011-4857 Memory corruption in n/a Critical 10.0
• CVE-2009-0263 Memory corruption in n/a Critical 10.0
• CVE-2004-1119 Memory corruption in n/a Critical 10.0
• CVE-2011-3834 Integer overflow in n/a Critical 9.3
• CVE-2010-2586 Integer overflow in n/a Critical 9.3

All Nullsoft Winamp vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7j57-vrgm-pf2m.