VULHUB ™

Nullsoft Winamp is a skinable media player for Microsoft Windows supporting MP3 and other filetypes. By default, Winamp skin files are given the .wsz extension. When installed, a skin file is placed in a predictable location within the installation directory of Winamp. An attacker may exploit this vulnerability to place malicious content in a known location. A URL reference to the file may then cause malicious content or code to be executed within local context. It has been reported that Winamp 3.0 is also vulnerable to this issue. Winamp3 uses skin files with the .wal extension, which are also saved in a known location.

Nullsoft Winamp is a skinable media player for Microsoft Windows supporting MP3 and other filetypes. By default, Winamp skin files are given the .wsz extension. When installed, a skin file is placed in a predictable location within the installation directory of Winamp. An attacker may exploit this vulnerability to place malicious content in a known location. A URL reference to the file may then cause malicious content or code to be executed within local context. It has been reported that Winamp 3.0 is also vulnerable to this issue. Winamp3 uses skin files with the .wal extension, which are also saved in a known location.