CVE-2002-2412: Nullsoft Winamp

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts.

Affected products

• Nullsoft Winamp: version 2.80 only

Published 2002-12-31. Last modified 2026-06-16.