CVE:CVE-2010-2586
CNNVD:CNNVD-201012-017
Winamp 是Nullsoft发布的免费音频播放器，支持多种格式。
Winamp 5.6之前版本中的in_nsv插件中的in_nsv.dll文件中存在多个整数溢出漏洞。远程攻击者可以借助能够触发堆缓冲区溢出的(1)NSV流或者(2)NSV文件中的特制目录(TOC)执行任意代码。
solution:Upgrade nullsoft winamp to a higher version than 5.581,0.20a,0.92,1.006,1.90,2.0,2.6,2.9,2.10,2.91,2.92,2.95,5.0,5.01,5.1,5.02,5.2,5.3,5.03,5.04,5.05,5.5,5.06,5.07,5.08c,5.08d,5.08e,5.09,5.11,5.12,5.13,5.21,5.22,5.23,5.24,5.31,5.32,5.33,5.34,5.35,5.51,5.52,5.53,5.54,5.55,5.56,5.58,5.091,5.093,5.094,5.111,5.112,5.531,5.541,5.551,5.552,5.572,and avoid the version (,5.581],0.20a,0.92,1.006,1.90,2.0,2.6,2.9,2.10,2.91,2.92,2.95,5.0,5.01,5.1,5.02,5.2,5.3,5.03,5.04,5.05,5.5,5.06,5.07,5.08c,5.08d,5.08e,5.09,5.11,5.12,5.13,5.21,5.22,5.23,5.24,5.31,5.32,5.33,5.34,5.35,5.51,5.52,5.53,5.54,5.55,5.56,5.58,5.091,5.093,5.094,5.111,5.112,5.531,5.541,5.551,5.552,5.572