CVE-2010-3137

Exploit

EPSS 4.21%
Veröffentlicht 26.08.2010 18:36:36
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wnaspi32.dll that is located in the same folder as a .669, .aac, .aiff, .amf, .au, .avr, .b4s, .caf or .cda file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Nullsoft ≫ Winamp Version5.581

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.21%	0.883

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://secunia.com/advisories/41093

http://www.cs.ucdavis.edu/research/tech-reports/2010/CSE-2010-2.pdf

http://www.exploit-db.com/exploits/14789

Exploit

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6874

https://nvd.nist.gov/vuln/detail/CVE-2010-3137

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-3137

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-3137

EUVD