PT-2010-5449 · Nullsoft · Winamp

Publicado 2010-12-02 · Atualizado 2017-09-19 · CVE-2010-4372

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Winamp versions prior to 5.6

Description The issue is related to an integer overflow in the in nsv plugin, which can be exploited by remote attackers through vectors related to improper allocation of memory for NSV metadata.

Recommendations For versions prior to 5.6, update to version 5.6 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2010-4372

Produtos afetados

Winamp

Referências · 5

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12358 · Nota
• http://forums.winamp.com/showthread.php?t=324322 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4372 · Nota de Segurança
• http://forums.winamp.com/showthread.php?threadid=159785 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4372 · Nota