CVE-2008-3567: Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows r...

Security readout for executives and security teams

This is an old Winamp vulnerability affecting versions before 5.541. A malicious MP3 could place JavaScript in ID3 metadata and trigger cross-zone scripting through Winamp's NowPlaying feature. Business urgency depends on whether legacy Winamp is still installed and used to open untrusted audio files. Exposure is most likely on legacy endpoints running Winamp before 5.541, especially where users open MP3 files from email, downloads, file shares, or other untrusted sources. The bundle does not identify affected operating systems or package identifiers. Treat this as a legacy software hygiene issue unless Winamp is still broadly deployed or used with untrusted media. Prioritize inventory and removal or upgrade over emergency response, because no active exploitation evidence is provided in the source bundle. Mitigation focus: Inventory endpoints for Winamp installations and versions.; Upgrade Winamp to 5.541 or later where still required.; Remove legacy Winamp where there is no business need..

Prepared

Jun 28, 2026, 18:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.