CVE-2002-0284: Nullsoft Winamp

Low severity, CVSS 2.6. EPSS: 0.9% chance of exploitation in the next 30 days.

Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname.

Affected products

• Nullsoft Winamp: version 2.77 only; version 2.78 only

Published 2002-05-31. Last modified 2026-06-16.