CVE-2002-2195: Nullsoft Winamp

Medium severity, CVSS 5.0. EPSS: 4.7% chance of exploitation in the next 30 days.

Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response.

Affected products

• Nullsoft Winamp: version 2.60 only; version 2.61 only; version 2.62 only; version 2.64 only; version 2.65 only; version 2.70 only; …

Published 2002-12-31. Last modified 2026-06-16.