Aggregates CVE and security vulnerability intelligence across all Nullsoft-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk buffer overflow and vendor risk cross-site scripting and related security problems, affecting vendor surface software deployment and vendor surface production workloads scenarios.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2002-1470 | SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable sc_serv.log file. | [email protected] | 2.1 | 0.48% | 2003-04-22 | 2026-06-16 |
| CVE-2002-1524 | Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) with a long include file tag. | [email protected] | 7.5 | 3.77% | 2003-04-02 | 2026-06-16 |
| CVE-2002-2412 | Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts. | [email protected] | 2.1 | 0.31% | 2002-12-31 | 2026-06-16 |
| CVE-2002-2392 | Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to (1) wsz and (2) wal files that contain embedded code. | [email protected] | 6.4 | 2.60% | 2002-12-31 | 2026-06-16 |
| CVE-2002-2195 | Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response. | [email protected] | 5.0 | 4.69% | 2002-12-31 | 2026-06-16 |
| CVE-2002-1177 | Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to execute arbitrary code via an MP3 file containing a long (1) Artist or (2) Album ID3v2 tag. | [email protected] | 7.5 | 2.63% | 2002-12-26 | 2026-06-16 |
| CVE-2002-1176 | Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file. | [email protected] | 7.5 | 2.34% | 2002-12-26 | 2026-06-16 |
| CVE-2002-0907 | Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-". | [email protected] | 7.5 | 5.63% | 2002-10-04 | 2026-06-16 |
| CVE-2002-0547 | Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag. | [email protected] | 7.5 | 3.25% | 2002-07-03 | 2026-06-16 |
| CVE-2002-0546 | Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID3v2 tag in an MP3 file. | [email protected] | 7.5 | 1.73% | 2002-07-03 | 2026-06-16 |
| CVE-2002-0284 | Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname. | [email protected] | 2.6 | 0.85% | 2002-05-31 | 2026-06-16 |
| CVE-2002-0199 | Buffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an argument with a large number of backslashes. | [email protected] | 7.5 | 3.36% | 2002-05-16 | 2026-06-16 |
| CVE-2001-1304 | Buffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service (crash) via several HTTP requests with a long (1) user-agent or (2) host HTTP header. | [email protected] | 5.0 | 1.93% | 2001-08-03 | 2026-06-16 |
| CVE-2001-0490 | Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file. | [email protected] | 7.5 | 3.54% | 2001-06-27 | 2026-06-16 |
| CVE-2000-0624 | Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U playlist. | [email protected] | 7.5 | 3.96% | 2000-07-20 | 2026-06-16 |
| CVE-2000-0049 | Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file. | [email protected] | 7.2 | 2.08% | 2000-01-04 | 2026-06-16 |
| CVE-1999-1561 | Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server. | [email protected] | 7.2 | 0.35% | 1999-08-20 | 2026-06-16 |