CVE-2010-4373 — Winamp vulnerability

2 documents2 sources
Severity
4.3MEDIUMNVD
EPSS
0.8%
top 26.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Nullsoft Winamp
Timeline
PublishedDec 2
Latest updateMay 17

Description

The in_mp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via crafted (1) metadata or (2) albumart in an invalid MP4 file.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDnullsoft/winamp5.581+56

Patches

Patch: forums.winamp.com ↗Patch: forums.winamp.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-rg78-c857-fg6x: The in_mp4 plugin in Winamp before 5↗2022-05-17
▶