Unrated severityNVD Advisory· Published Aug 1, 2008· Updated Apr 23, 2026
CVE-2008-3441
CVE-2008-3441
Description
Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- securitytracker.com/idnvdThird Party AdvisoryVDB Entry
- www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdfnvdThird Party Advisory
- www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gznvdThird Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15225nvdThird Party Advisory
- archives.neohapsis.com/archives/bugtraq/2008-07/0250.htmlnvdBroken Link
News mentions
0No linked articles in our index yet.