Published: 26/08/2010 Updated: 19/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wnaspi32.dll that is located in the same folder as a .669, .aac, .aiff, .amf, .au, .avr, .b4s, .caf or .cda file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nullsoft winamp 5.581

/* Nullsoft Winamp 5581 (wnaspi32dll) DLL Hijacking Exploit Vendor: Nullsoft Product Web Page: wwwwinampcom Affected Version: 5581 (x86) Summary: Winamp is a media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL It is proprietary freeware/shareware, multi-format, extensible with plug-ins and skins ...

NVD-CWE-Other http://www.exploit-db.com/exploits/14789 http://www.cs.ucdavis.edu/research/tech-reports/2010/CSE-2010-2.pdf http://secunia.com/advisories/41093 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6874 https://nvd.nist.gov https://www.exploit-db.com/exploits/14789/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-3137

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect