CVE-2010-4372 — Winamp vulnerability

2 documents2 sources
Severity
9.3CRITICALNVD
EPSS
0.9%
top 24.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Nullsoft Winamp
Timeline
PublishedDec 2
Latest updateMay 17

Description

Integer overflow in the in_nsv plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to improper allocation of memory for NSV metadata, a different vulnerability than CVE-2010-2586.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDnullsoft/winamp5.581+56

🔴Vulnerability Details

1
GHSA
GHSA-xrqw-4q5c-x35c: Integer overflow in the in_nsv plugin in Winamp before 5↗2022-05-17
▶