ByteOS Network

Vulnerability Details :

CVE-2010-4370

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-02 Dec, 2010 | 16:00

Updated At-07 Aug, 2024 | 03:43

Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:02 Dec, 2010 | 16:00

Updated At:07 Aug, 2024 | 03:43

▼CVE Numbering Authority (CNA)

Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://secunia.com/advisories/42004	third-party-advisory x_refsource_SECUNIA
http://forums.winamp.com/showthread.php?threadid=159785	x_refsource_CONFIRM
http://forums.winamp.com/showthread.php?t=324322	x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11841	vdb-entry signature x_refsource_OVAL
http://www.securityfocus.com/archive/1/515388/100/0/threaded	mailing-list x_refsource_BUGTRAQ

Hyperlink: http://secunia.com/advisories/42004

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://forums.winamp.com/showthread.php?threadid=159785

Resource:

x_refsource_CONFIRM

Hyperlink: http://forums.winamp.com/showthread.php?t=324322

Resource:

x_refsource_CONFIRM

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11841

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.securityfocus.com/archive/1/515388/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://secunia.com/advisories/42004	third-party-advisory x_refsource_SECUNIA x_transferred
http://forums.winamp.com/showthread.php?threadid=159785	x_refsource_CONFIRM x_transferred
http://forums.winamp.com/showthread.php?t=324322	x_refsource_CONFIRM x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11841	vdb-entry signature x_refsource_OVAL x_transferred
http://www.securityfocus.com/archive/1/515388/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred

Hyperlink: http://secunia.com/advisories/42004

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://forums.winamp.com/showthread.php?threadid=159785

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://forums.winamp.com/showthread.php?t=324322

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11841

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/515388/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:02 Dec, 2010 | 16:22

Updated At:11 Apr, 2025 | 00:51

Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

nullsoft>>winamp>>Versions up to 5.581(inclusive)

cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*

nullsoft>>winamp>>0.20a

cpe:2.3:a:nullsoft:winamp:0.20a:*:*:*:*:*:*:*

nullsoft>>winamp>>0.92

cpe:2.3:a:nullsoft:winamp:0.92:*:*:*:*:*:*:*

nullsoft>>winamp>>1.006

cpe:2.3:a:nullsoft:winamp:1.006:*:*:*:*:*:*:*

nullsoft>>winamp>>1.90

cpe:2.3:a:nullsoft:winamp:1.90:*:*:*:*:*:*:*

nullsoft>>winamp>>2.0

cpe:2.3:a:nullsoft:winamp:2.0:*:*:*:*:*:*:*

nullsoft>>winamp>>2.6

cpe:2.3:a:nullsoft:winamp:2.6:*:*:*:*:*:*:*

nullsoft>>winamp>>2.9

cpe:2.3:a:nullsoft:winamp:2.9:*:*:*:*:*:*:*

nullsoft>>winamp>>2.10

cpe:2.3:a:nullsoft:winamp:2.10:*:*:*:*:*:*:*

nullsoft>>winamp>>2.91

cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*

nullsoft>>winamp>>2.92

cpe:2.3:a:nullsoft:winamp:2.92:*:*:*:*:*:*:*

nullsoft>>winamp>>2.95

cpe:2.3:a:nullsoft:winamp:2.95:*:*:*:*:*:*:*

nullsoft>>winamp>>5.0

cpe:2.3:a:nullsoft:winamp:5.0:*:*:*:*:*:*:*

nullsoft>>winamp>>5.01

cpe:2.3:a:nullsoft:winamp:5.01:*:*:*:*:*:*:*

nullsoft>>winamp>>5.1

cpe:2.3:a:nullsoft:winamp:5.1:-:surround:*:*:*:*:*

nullsoft>>winamp>>5.02

cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:*

nullsoft>>winamp>>5.2

cpe:2.3:a:nullsoft:winamp:5.2:*:*:*:*:*:*:*

nullsoft>>winamp>>5.3

cpe:2.3:a:nullsoft:winamp:5.3:*:*:*:*:*:*:*

nullsoft>>winamp>>5.03

cpe:2.3:a:nullsoft:winamp:5.03:*:*:*:*:*:*:*

nullsoft>>winamp>>5.04

cpe:2.3:a:nullsoft:winamp:5.04:*:*:*:*:*:*:*

nullsoft>>winamp>>5.05

cpe:2.3:a:nullsoft:winamp:5.05:*:*:*:*:*:*:*

nullsoft>>winamp>>5.5

cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*

nullsoft>>winamp>>5.06

cpe:2.3:a:nullsoft:winamp:5.06:*:*:*:*:*:*:*

nullsoft>>winamp>>5.07

cpe:2.3:a:nullsoft:winamp:5.07:*:*:*:*:*:*:*

nullsoft>>winamp>>5.08c

cpe:2.3:a:nullsoft:winamp:5.08c:*:*:*:*:*:*:*

nullsoft>>winamp>>5.08d

cpe:2.3:a:nullsoft:winamp:5.08d:*:*:*:*:*:*:*

nullsoft>>winamp>>5.08e

cpe:2.3:a:nullsoft:winamp:5.08e:*:*:*:*:*:*:*

nullsoft>>winamp>>5.09

cpe:2.3:a:nullsoft:winamp:5.09:*:*:*:*:*:*:*

nullsoft>>winamp>>5.11

cpe:2.3:a:nullsoft:winamp:5.11:*:*:*:*:*:*:*

nullsoft>>winamp>>5.12

cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*

nullsoft>>winamp>>5.13

cpe:2.3:a:nullsoft:winamp:5.13:*:*:*:*:*:*:*

nullsoft>>winamp>>5.21

cpe:2.3:a:nullsoft:winamp:5.21:*:*:*:*:*:*:*

nullsoft>>winamp>>5.22

cpe:2.3:a:nullsoft:winamp:5.22:*:*:*:*:*:*:*

nullsoft>>winamp>>5.23

cpe:2.3:a:nullsoft:winamp:5.23:*:*:*:*:*:*:*

nullsoft>>winamp>>5.24

cpe:2.3:a:nullsoft:winamp:5.24:*:*:*:*:*:*:*

nullsoft>>winamp>>5.31

cpe:2.3:a:nullsoft:winamp:5.31:*:*:*:*:*:*:*

nullsoft>>winamp>>5.32

cpe:2.3:a:nullsoft:winamp:5.32:*:*:*:*:*:*:*

nullsoft>>winamp>>5.33

cpe:2.3:a:nullsoft:winamp:5.33:*:*:*:*:*:*:*

nullsoft>>winamp>>5.34

cpe:2.3:a:nullsoft:winamp:5.34:*:*:*:*:*:*:*

nullsoft>>winamp>>5.35

cpe:2.3:a:nullsoft:winamp:5.35:*:*:*:*:*:*:*

nullsoft>>winamp>>5.51

cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*

nullsoft>>winamp>>5.52

cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*

nullsoft>>winamp>>5.53

cpe:2.3:a:nullsoft:winamp:5.53:*:*:*:*:*:*:*

nullsoft>>winamp>>5.54

cpe:2.3:a:nullsoft:winamp:5.54:*:*:*:*:*:*:*

nullsoft>>winamp>>5.55

cpe:2.3:a:nullsoft:winamp:5.55:*:*:*:*:*:*:*

nullsoft>>winamp>>5.56

cpe:2.3:a:nullsoft:winamp:5.56:*:*:*:*:*:*:*

nullsoft>>winamp>>5.58

cpe:2.3:a:nullsoft:winamp:5.58:*:*:*:*:*:*:*

nullsoft>>winamp>>5.091

cpe:2.3:a:nullsoft:winamp:5.091:*:*:*:*:*:*:*

nullsoft>>winamp>>5.093

cpe:2.3:a:nullsoft:winamp:5.093:*:*:*:*:*:*:*

nullsoft>>winamp>>5.094

cpe:2.3:a:nullsoft:winamp:5.094:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-189	Primary	nvd@nist.gov

CWE ID: CWE-189

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://forums.winamp.com/showthread.php?t=324322	cve@mitre.org	N/A
http://forums.winamp.com/showthread.php?threadid=159785	cve@mitre.org	N/A
http://secunia.com/advisories/42004	cve@mitre.org	Vendor Advisory
http://www.securityfocus.com/archive/1/515388/100/0/threaded	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11841	cve@mitre.org	N/A
http://forums.winamp.com/showthread.php?t=324322	af854a3a-2127-422b-91ae-364da2661108	N/A
http://forums.winamp.com/showthread.php?threadid=159785	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/42004	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/archive/1/515388/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11841	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://forums.winamp.com/showthread.php?t=324322

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://forums.winamp.com/showthread.php?threadid=159785

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/42004

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/archive/1/515388/100/0/threaded

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11841

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://forums.winamp.com/showthread.php?t=324322