CVE-2010-4374 — Winamp vulnerability

CWE-3992 documents2 sources
Severity
4.3MEDIUMNVD
EPSS
0.8%
top 26.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Nullsoft Winamp
Timeline
PublishedDec 2
Latest updateMay 17

Description

The in_mkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via a Matroska Video (MKV) file containing a string with a crafted length.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDnullsoft/winamp5.581+56

Patches

Patch: forums.winamp.com ↗Patch: forums.winamp.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-828g-2vfm-jjx3: The in_mkv plugin in Winamp before 5↗2022-05-17
▶