CVE-2003-1274

CVE-2003-1274 describes a denial-of-service vulnerability in Winamp 3.0, where remote attackers can crash the application. This is achieved by providing a specially crafted .b4s file that uses MS-DOS device names (e.g., "aux") within the "file:" argument of the Playstring parameter. The vulnerability has a CVSS score of 5.0, indicating a medium severity, as it requires no authentication and has a low attack complexity, but only leads to a partial impact on availability. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, though it has garnered some community discussion.