CVE-2008-3567

Published Aug 10, 2008 CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Description
Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting (XSS) attacks via an MP3 file with JavaScript in id3 tags.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2008-3553 Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting (XSS) attacks via an MP3 file with JavaScript in id3 tags.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 9:45 AM
Reserved
Aug 10, 2008, 12:00 AM
Status
Modified
Published
Aug 10, 2008, 8:41 PM
Modified
Jun 16, 2026, 10:56 PM