Vulnerability CVE-2004-0820 - CERT Civis.Net

Vulnerability Name:

CVE-2004-0820 (CCN-17124)

Assigned:

2004-08-25

Published:

2004-08-25

Updated:

2017-07-11

Summary:

Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.

CVSS v3 Severity:

5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2004-0820

Source: CCN
Type: SA12381
Winamp Skin File Arbitrary Code Execution Vulnerability

Source: SECUNIA
Type: Patch, Vendor Advisory
12381

Source: AUSCERT
Type: Patch, Vendor Advisory
ESB-2004.0537

Source: MISC
Type: Patch, Vendor Advisory
http://www.frsirt.com/exploits/08252004.skinhead.php

Source: CCN
Type: OSVDB ID: 9195
Winamp Skin File (.WSZ) Local Zone Arbitrary Code Execution

Source: CCN
Type: BID-11053
NullSoft Winamp .WSZ File Remote Code Execution Vulnerability

Source: CCN
Type: Winamp Security Bulletin Aug. 27, 2004
Nullsoft has issued a fix for a newly discovered security vulnerability affecting Winamp 3.0, 5.0 and 5.0 Pro or newer.

Source: XF
Type: UNKNOWN
winamp-wsz-execute-code(17124)

Source: XF
Type: UNKNOWN
winamp-wsz-execute-code(17124)

Vulnerable Configuration:

Configuration 1:

cpe:/a:nullsoft:winamp:2.4:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.5e:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.10:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.24:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.50:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.60:*:full:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.60:*:lite:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.61:*:full:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.62:*:standard:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.64:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.64:*:standard:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.65:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.70:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.70:*:full:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.71:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.72:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.73:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.73:*:full:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.74:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.75:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.76:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.77:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.78:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.79:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.80:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.81:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:2.91:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:3.0:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:3.1:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:5.01:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:5.02:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:5.03:*:*:*:*:*:*:*

OR cpe:/a:nullsoft:winamp:5.04:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:nullsoft:winamp:3.0:*:*:*:*:*:*:*

Denotes that component is vulnerable