Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Winamp | Nullsoft | 2.77 (including) | 2.77 (including) |
Winamp | Nullsoft | 2.78 (including) | 2.78 (including) |