What’s Vulnerable › Vulnerabilities
CVE-2002-0284
- Severity: low (CVSS 2.6 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2002-05-31 · updated 2026-06-16
Description
Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname.
Affected products
- Nullsoft Winamp: 2.77, 2.78
References
Get alerted when CVE-2002-0284 or the next vulnerability affects your stack