CVE-2010-3137: Critical severity Nullsoft Winamp vulnerability
Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wnaspi32.dll that is located in the same folder as a .669, .aac, .aiff, .amf, .au, .avr, .b4s, .caf or .cda file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3137?
CVE-2010-3137 is considered to have a high severity due to its ability to allow arbitrary code execution through DLL hijacking.
How do I fix CVE-2010-3137?
To fix CVE-2010-3137, upgrade to the latest version of Nullsoft Winamp that addresses this vulnerability.
Who is affected by CVE-2010-3137?
CVE-2010-3137 affects local users of Nullsoft Winamp 5.581 and potentially puts remote users at risk through Trojan horses.
What kind of attacks can CVE-2010-3137 enable?
CVE-2010-3137 can enable attackers to conduct DLL hijacking attacks by executing arbitrary code.
Is CVE-2010-3137 a known issue in other versions of Winamp?
Yes, while CVE-2010-3137 specifically mentions Winamp 5.581, it's likely that other versions may also be vulnerable.