CVE-2008-3567

Published: Aug 10, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting (XSS) attacks via an MP3 file with JavaScript in id3 tags.

Affected (72)

Products: Nullsoft: Winamp

Nullsoft

1 product

Winamp

Configuration A

72 vulnerable

Vulnerable Software	Affected Versions
Nullsoft Winamp	Up to 5.54
Nullsoft Winamp	Version 2.0
Nullsoft Winamp	Version 2.10
Nullsoft Winamp	Version 2.24
Nullsoft Winamp	Version 2.4
Nullsoft Winamp	Version 2.50
Nullsoft Winamp	Version 2.5e
Nullsoft Winamp	Version 2.60
Nullsoft Winamp	Version 2.61
Nullsoft Winamp	Version 2.62
Nullsoft Winamp	Version 2.64
Nullsoft Winamp	Version 2.65
Nullsoft Winamp	Version 2.6x
Nullsoft Winamp	Version 2.70
Nullsoft Winamp	Version 2.71
Nullsoft Winamp	Version 2.72
Nullsoft Winamp	Version 2.73
Nullsoft Winamp	Version 2.74
Nullsoft Winamp	Version 2.75
Nullsoft Winamp	Version 2.76
Nullsoft Winamp	Version 2.77
Nullsoft Winamp	Version 2.78
Nullsoft Winamp	Version 2.79
Nullsoft Winamp	Version 2.7x
Nullsoft Winamp	Version 2.80
Nullsoft Winamp	Version 2.81
Nullsoft Winamp	Version 2.90
Nullsoft Winamp	Version 2.91
Nullsoft Winamp	Version 2.95
Nullsoft Winamp	Version 3.0
Nullsoft Winamp	Version 3.1
Nullsoft Winamp	Version 5.0.1
Nullsoft Winamp	Version 5.0.2
Nullsoft Winamp	Version 5.01
Nullsoft Winamp	Version 5.02
Nullsoft Winamp	Version 5.03
Nullsoft Winamp	Version 5.03a
Nullsoft Winamp	Version 5.04
Nullsoft Winamp	Version 5.05
Nullsoft Winamp	Version 5.06
Nullsoft Winamp	Version 5.07
Nullsoft Winamp	Version 5.08
Nullsoft Winamp	Version 5.08c
Nullsoft Winamp	Version 5.08d
Nullsoft Winamp	Version 5.08e
Nullsoft Winamp	Version 5.091
Nullsoft Winamp	Version 5.093
Nullsoft Winamp	Version 5.094
Nullsoft Winamp	Version 5.09
Nullsoft Winamp	Version 5.0
Nullsoft Winamp	Version 5.111
Nullsoft Winamp	Version 5.112
Nullsoft Winamp	Version 5.11
Nullsoft Winamp	Version 5.12
Nullsoft Winamp	Version 5.13
Nullsoft Winamp	Version 5.1
Nullsoft Winamp	Version 5.21
Nullsoft Winamp	Version 5.22
Nullsoft Winamp	Version 5.23
Nullsoft Winamp	Version 5.24
Nullsoft Winamp	Version 5.2
Nullsoft Winamp	Version 5.31
Nullsoft Winamp	Version 5.32
Nullsoft Winamp	Version 5.33
Nullsoft Winamp	Version 5.34
Nullsoft Winamp	Version 5.35
Nullsoft Winamp	Version 5.36
Nullsoft Winamp	Version 5.3
Nullsoft Winamp	Version 5.51
Nullsoft Winamp	Version 5.52
Nullsoft Winamp	Version 5.53
Nullsoft Winamp	Version 5.5