Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-4371


Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment box.


Published

2010-12-02T16:22:21.973

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nullsoft winamp ≤ 5.581 Yes
Application nullsoft winamp 0.20a Yes
Application nullsoft winamp 0.92 Yes
Application nullsoft winamp 1.006 Yes
Application nullsoft winamp 1.90 Yes
Application nullsoft winamp 2.0 Yes
Application nullsoft winamp 2.6 Yes
Application nullsoft winamp 2.9 Yes
Application nullsoft winamp 2.10 Yes
Application nullsoft winamp 2.91 Yes
Application nullsoft winamp 2.92 Yes
Application nullsoft winamp 2.95 Yes
Application nullsoft winamp 5.0 Yes
Application nullsoft winamp 5.01 Yes
Application nullsoft winamp 5.1 Yes
Application nullsoft winamp 5.02 Yes
Application nullsoft winamp 5.2 Yes
Application nullsoft winamp 5.3 Yes
Application nullsoft winamp 5.03 Yes
Application nullsoft winamp 5.04 Yes
Application nullsoft winamp 5.05 Yes
Application nullsoft winamp 5.5 Yes
Application nullsoft winamp 5.06 Yes
Application nullsoft winamp 5.07 Yes
Application nullsoft winamp 5.08c Yes
Application nullsoft winamp 5.08d Yes
Application nullsoft winamp 5.08e Yes
Application nullsoft winamp 5.09 Yes
Application nullsoft winamp 5.11 Yes
Application nullsoft winamp 5.12 Yes
Application nullsoft winamp 5.13 Yes
Application nullsoft winamp 5.21 Yes
Application nullsoft winamp 5.22 Yes
Application nullsoft winamp 5.23 Yes
Application nullsoft winamp 5.24 Yes
Application nullsoft winamp 5.31 Yes
Application nullsoft winamp 5.32 Yes
Application nullsoft winamp 5.33 Yes
Application nullsoft winamp 5.34 Yes
Application nullsoft winamp 5.35 Yes
Application nullsoft winamp 5.51 Yes
Application nullsoft winamp 5.52 Yes
Application nullsoft winamp 5.53 Yes
Application nullsoft winamp 5.54 Yes
Application nullsoft winamp 5.55 Yes
Application nullsoft winamp 5.56 Yes
Application nullsoft winamp 5.58 Yes
Application nullsoft winamp 5.091 Yes
Application nullsoft winamp 5.093 Yes
Application nullsoft winamp 5.094 Yes
Application nullsoft winamp 5.111 Yes
Application nullsoft winamp 5.112 Yes
Application nullsoft winamp 5.531 Yes
Application nullsoft winamp 5.541 Yes
Application nullsoft winamp 5.551 Yes
Application nullsoft winamp 5.552 Yes
Application nullsoft winamp 5.572 Yes

References