CVE-2002-1524: Nullsoft Winamp

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) with a long include file tag.

Affected products

• Nullsoft Winamp: version 3.0 only

Published 2003-04-02. Last modified 2026-06-16.