Vulnerability Details CVE-2010-4373
The in_mp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via crafted (1) metadata or (2) albumart in an invalid MP4 file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.0%
CVSS Severity
CVSS v2 Score 4.3
References
- http://forums.winamp.com/showthread.php?t=324322
- http://forums.winamp.com/showthread.php?threadid=159785
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12425
- http://forums.winamp.com/showthread.php?t=324322
- http://forums.winamp.com/showthread.php?threadid=159785
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12425
Products affected by CVE-2010-4373
-
cpe:2.3:a:nullsoft:winamp:0.20a
-
cpe:2.3:a:nullsoft:winamp:0.92
-
cpe:2.3:a:nullsoft:winamp:1.006
-
cpe:2.3:a:nullsoft:winamp:1.90
-
cpe:2.3:a:nullsoft:winamp:2.0
-
cpe:2.3:a:nullsoft:winamp:2.10
-
cpe:2.3:a:nullsoft:winamp:2.6
-
cpe:2.3:a:nullsoft:winamp:2.9
-
cpe:2.3:a:nullsoft:winamp:2.91
-
cpe:2.3:a:nullsoft:winamp:2.92
-
cpe:2.3:a:nullsoft:winamp:2.95
-
cpe:2.3:a:nullsoft:winamp:5.0
-
cpe:2.3:a:nullsoft:winamp:5.01
-
cpe:2.3:a:nullsoft:winamp:5.02
-
cpe:2.3:a:nullsoft:winamp:5.03
-
cpe:2.3:a:nullsoft:winamp:5.04
-
cpe:2.3:a:nullsoft:winamp:5.05
-
cpe:2.3:a:nullsoft:winamp:5.06
-
cpe:2.3:a:nullsoft:winamp:5.07
-
cpe:2.3:a:nullsoft:winamp:5.08c
-
cpe:2.3:a:nullsoft:winamp:5.08d
-
cpe:2.3:a:nullsoft:winamp:5.08e
-
cpe:2.3:a:nullsoft:winamp:5.09
-
cpe:2.3:a:nullsoft:winamp:5.091
-
cpe:2.3:a:nullsoft:winamp:5.093
-
cpe:2.3:a:nullsoft:winamp:5.094
-
cpe:2.3:a:nullsoft:winamp:5.1
-
cpe:2.3:a:nullsoft:winamp:5.11
-
cpe:2.3:a:nullsoft:winamp:5.111
-
cpe:2.3:a:nullsoft:winamp:5.112
-
cpe:2.3:a:nullsoft:winamp:5.12
-
cpe:2.3:a:nullsoft:winamp:5.13
-
cpe:2.3:a:nullsoft:winamp:5.2
-
cpe:2.3:a:nullsoft:winamp:5.21
-
cpe:2.3:a:nullsoft:winamp:5.22
-
cpe:2.3:a:nullsoft:winamp:5.23
-
cpe:2.3:a:nullsoft:winamp:5.24
-
cpe:2.3:a:nullsoft:winamp:5.3
-
cpe:2.3:a:nullsoft:winamp:5.31
-
cpe:2.3:a:nullsoft:winamp:5.32
-
cpe:2.3:a:nullsoft:winamp:5.33
-
cpe:2.3:a:nullsoft:winamp:5.34
-
cpe:2.3:a:nullsoft:winamp:5.35
-
cpe:2.3:a:nullsoft:winamp:5.36
-
cpe:2.3:a:nullsoft:winamp:5.5
-
cpe:2.3:a:nullsoft:winamp:5.51
-
cpe:2.3:a:nullsoft:winamp:5.52
-
cpe:2.3:a:nullsoft:winamp:5.53
-
cpe:2.3:a:nullsoft:winamp:5.531
-
cpe:2.3:a:nullsoft:winamp:5.54
-
cpe:2.3:a:nullsoft:winamp:5.541
-
cpe:2.3:a:nullsoft:winamp:5.55
-
cpe:2.3:a:nullsoft:winamp:5.551
-
cpe:2.3:a:nullsoft:winamp:5.552
-
cpe:2.3:a:nullsoft:winamp:5.56
-
cpe:2.3:a:nullsoft:winamp:5.57
-
cpe:2.3:a:nullsoft:winamp:5.572
-
cpe:2.3:a:nullsoft:winamp:5.58
-
cpe:2.3:a:nullsoft:winamp:5.581
-
cpe:2.3:a:nullsoft:winamp:5.59
-
cpe:2.3:a:nullsoft:winamp:5.61
-
cpe:2.3:a:nullsoft:winamp:5.63