CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-3441

Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.011

EPSS Ranking 76.9%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2008-3441

Nullsoft » Winamp » Version: 0.20a

cpe:2.3:a:nullsoft:winamp:0.20a
Nullsoft » Winamp » Version: 0.92

cpe:2.3:a:nullsoft:winamp:0.92
Nullsoft » Winamp » Version: 1.006

cpe:2.3:a:nullsoft:winamp:1.006
Nullsoft » Winamp » Version: 1.90

cpe:2.3:a:nullsoft:winamp:1.90
Nullsoft » Winamp » Version: 2.0

cpe:2.3:a:nullsoft:winamp:2.0
Nullsoft » Winamp » Version: 2.10

cpe:2.3:a:nullsoft:winamp:2.10
Nullsoft » Winamp » Version: 2.6

cpe:2.3:a:nullsoft:winamp:2.6
Nullsoft » Winamp » Version: 2.9

cpe:2.3:a:nullsoft:winamp:2.9
Nullsoft » Winamp » Version: 2.91

cpe:2.3:a:nullsoft:winamp:2.91
Nullsoft » Winamp » Version: 2.92

cpe:2.3:a:nullsoft:winamp:2.92
Nullsoft » Winamp » Version: 2.95

cpe:2.3:a:nullsoft:winamp:2.95
Nullsoft » Winamp » Version: 5.0

cpe:2.3:a:nullsoft:winamp:5.0
Nullsoft » Winamp » Version: 5.01

cpe:2.3:a:nullsoft:winamp:5.01
Nullsoft » Winamp » Version: 5.02

cpe:2.3:a:nullsoft:winamp:5.02
Nullsoft » Winamp » Version: 5.03

cpe:2.3:a:nullsoft:winamp:5.03
Nullsoft » Winamp » Version: 5.04

cpe:2.3:a:nullsoft:winamp:5.04
Nullsoft » Winamp » Version: 5.05

cpe:2.3:a:nullsoft:winamp:5.05
Nullsoft » Winamp » Version: 5.06

cpe:2.3:a:nullsoft:winamp:5.06
Nullsoft » Winamp » Version: 5.07

cpe:2.3:a:nullsoft:winamp:5.07
Nullsoft » Winamp » Version: 5.08c

cpe:2.3:a:nullsoft:winamp:5.08c
Nullsoft » Winamp » Version: 5.08d

cpe:2.3:a:nullsoft:winamp:5.08d
Nullsoft » Winamp » Version: 5.08e

cpe:2.3:a:nullsoft:winamp:5.08e
Nullsoft » Winamp » Version: 5.09

cpe:2.3:a:nullsoft:winamp:5.09
Nullsoft » Winamp » Version: 5.1

cpe:2.3:a:nullsoft:winamp:5.1
Nullsoft » Winamp » Version: 5.11

cpe:2.3:a:nullsoft:winamp:5.11
Nullsoft » Winamp » Version: 5.12

cpe:2.3:a:nullsoft:winamp:5.12
Nullsoft » Winamp » Version: 5.13

cpe:2.3:a:nullsoft:winamp:5.13
Nullsoft » Winamp » Version: 5.2

cpe:2.3:a:nullsoft:winamp:5.2
Nullsoft » Winamp » Version: 5.21

cpe:2.3:a:nullsoft:winamp:5.21
Nullsoft » Winamp » Version: 5.22

cpe:2.3:a:nullsoft:winamp:5.22
Nullsoft » Winamp » Version: 5.23

cpe:2.3:a:nullsoft:winamp:5.23
Nullsoft » Winamp » Version: 5.3

cpe:2.3:a:nullsoft:winamp:5.3
Nullsoft » Winamp » Version: 5.5

cpe:2.3:a:nullsoft:winamp:5.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-3441

Products

Pricing

Contact Us