← Database

CVE-2008-3567

MEDIUM CVSS: 4.3 Published: 2008-08-10 Modified: 2026-06-16

Description

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting (XSS) attacks via an MP3 file with JavaScript in id3 tags.

Affected Platforms

Nullsoft Winamp

Weakness Type

CWE-79

References