Lucene search

K
cve[email protected]CVE-2010-4374
HistoryDec 02, 2010 - 4:22 p.m.

CVE-2010-4374

2010-12-0216:22:22
CWE-399
web.nvd.nist.gov
20
winamp
in_mkv
plugin
remote attackers
denial of service
mkv
vulnerability
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.3%

The in_mkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via a Matroska Video (MKV) file containing a string with a crafted length.

Affected configurations

NVD
Node
nullsoftwinampRange5.581
OR
nullsoftwinampMatch0.20a
OR
nullsoftwinampMatch0.92
OR
nullsoftwinampMatch1.006
OR
nullsoftwinampMatch1.90
OR
nullsoftwinampMatch2.0
OR
nullsoftwinampMatch2.6
OR
nullsoftwinampMatch2.9
OR
nullsoftwinampMatch2.10
OR
nullsoftwinampMatch2.91
OR
nullsoftwinampMatch2.92
OR
nullsoftwinampMatch2.95
OR
nullsoftwinampMatch5.0
OR
nullsoftwinampMatch5.01
OR
nullsoftwinampMatch5.1-surround
OR
nullsoftwinampMatch5.02
OR
nullsoftwinampMatch5.2
OR
nullsoftwinampMatch5.3
OR
nullsoftwinampMatch5.03
OR
nullsoftwinampMatch5.04
OR
nullsoftwinampMatch5.05
OR
nullsoftwinampMatch5.5
OR
nullsoftwinampMatch5.06
OR
nullsoftwinampMatch5.07
OR
nullsoftwinampMatch5.08c
OR
nullsoftwinampMatch5.08d
OR
nullsoftwinampMatch5.08e
OR
nullsoftwinampMatch5.09
OR
nullsoftwinampMatch5.11
OR
nullsoftwinampMatch5.12
OR
nullsoftwinampMatch5.13
OR
nullsoftwinampMatch5.21
OR
nullsoftwinampMatch5.22
OR
nullsoftwinampMatch5.23
OR
nullsoftwinampMatch5.24
OR
nullsoftwinampMatch5.31
OR
nullsoftwinampMatch5.32
OR
nullsoftwinampMatch5.33
OR
nullsoftwinampMatch5.34
OR
nullsoftwinampMatch5.35
OR
nullsoftwinampMatch5.51
OR
nullsoftwinampMatch5.52
OR
nullsoftwinampMatch5.53
OR
nullsoftwinampMatch5.54
OR
nullsoftwinampMatch5.55
OR
nullsoftwinampMatch5.56
OR
nullsoftwinampMatch5.58
OR
nullsoftwinampMatch5.091
OR
nullsoftwinampMatch5.093
OR
nullsoftwinampMatch5.094
OR
nullsoftwinampMatch5.111
OR
nullsoftwinampMatch5.112
OR
nullsoftwinampMatch5.531
OR
nullsoftwinampMatch5.541
OR
nullsoftwinampMatch5.551
OR
nullsoftwinampMatch5.552
OR
nullsoftwinampMatch5.572

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.3%

Related for CVE-2010-4374