VULNERABILITY INTELLIGENCE
CVE-2010-4370
CVSS score9.3 HIGH
EPSS probability5.00%
CISA KEVNot currently listed
Published2010-12-02
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow.