{ "id": "CVE-2002-2195", "sourceIdentifier": "cve@mitre.org", "published": "2002-12-31T05:00:00.000", "lastModified": "2024-11-20T23:43:06.170", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response." } ], "metrics": { "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "baseScore": 5.0, "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "availabilityImpact": "NONE" }, "baseSeverity": "MEDIUM", "exploitabilityScore": 10.0, "impactScore": 2.9, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "NVD-CWE-Other" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.60:*:lite:*:*:*:*:*", "matchCriteriaId": "E7254BFD-8301-4E99-AB73-7D1D9E7939FA" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.61:*:full:*:*:*:*:*", "matchCriteriaId": "27826A30-3E5C-4B7D-B86B-8B0A68D2F944" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.62:*:standard:*:*:*:*:*", "matchCriteriaId": "665C2A54-AF79-4315-BFEF-FA44E015B9C1" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.64:*:standard:*:*:*:*:*", "matchCriteriaId": "0DB02A8B-71ED-4FBF-9D01-D16F1351E702" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.65:*:*:*:*:*:*:*", "matchCriteriaId": "6D708182-E39F-44E4-9C67-52A85ACBA43C" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.70:*:*:*:*:*:*:*", "matchCriteriaId": "053A71B1-EF83-4750-ACCD-7ABEFF593BEE" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.70:*:full:*:*:*:*:*", "matchCriteriaId": "F07CC71D-A616-483B-ABCB-AA6DDCE3531F" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.71:*:*:*:*:*:*:*", "matchCriteriaId": "0C5286A1-C8ED-4783-9278-D30D9B1C588A" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.72:*:*:*:*:*:*:*", "matchCriteriaId": "3513F3C2-CDD6-461C-985E-E06151AEA804" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.73:*:*:*:*:*:*:*", "matchCriteriaId": "DC6CB5C4-0FEC-4F85-B874-E06229265457" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.73:*:full:*:*:*:*:*", "matchCriteriaId": "C700DFBF-9B22-4633-947C-840CF01423C2" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.74:*:*:*:*:*:*:*", "matchCriteriaId": "AD6E478F-D058-482B-B027-605B7A769900" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.75:*:*:*:*:*:*:*", "matchCriteriaId": "B9D8698A-B1AE-4041-9055-B6690F671E42" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.76:*:*:*:*:*:*:*", "matchCriteriaId": "E2CC66AF-0CB8-4E15-98A3-4704CB2AD78E" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*", "matchCriteriaId": "AEDAD5F1-5B42-40ED-919C-65343567261C" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*", "matchCriteriaId": "BAC79237-791C-4830-BC81-D534FA537D53" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nullsoft:winamp:2.80:*:*:*:*:*:*:*", "matchCriteriaId": "E1AFA764-16B4-4E5E-8F9C-46098E758CC7" } ] } ] } ], "references": [ { "url": "http://online.securityfocus.com/archive/1/280786", "source": "cve@mitre.org" }, { "url": "http://www.iss.net/security_center/static/9488.php", "source": "cve@mitre.org", "tags": [ "Exploit" ] }, { "url": "http://www.securityfocus.com/bid/5170", "source": "cve@mitre.org", "tags": [ "Exploit", "Patch" ] }, { "url": "http://online.securityfocus.com/archive/1/280786", "source": "af854a3a-2127-422b-91ae-364da2661108" }, { "url": "http://www.iss.net/security_center/static/9488.php", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Exploit" ] }, { "url": "http://www.securityfocus.com/bid/5170", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Exploit", "Patch" ] } ] }