CVE-2010-4370: Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arb...

Security readout for executives and security teams

CVE-2010-4370 is a Winamp MIDI parsing vulnerability. Winamp versions before 5.6 could be compromised when processing a specially crafted MIDI file, potentially allowing attacker-controlled code to run on the user’s machine. Exposure is most likely on legacy endpoints still running Winamp before 5.6, especially where users can receive or open MIDI files. Modern environments are unlikely to be exposed unless old media workstations or archived software images remain in use. Treat this as a legacy software cleanup issue with high impact if exposed. Prioritize asset discovery and removal or upgrade of pre-5.6 Winamp, especially on systems that handle external media files. Mitigation focus: Upgrade Winamp installations older than 5.6 where found.; Remove unsupported legacy Winamp installations when business use is not required.; Check vendor or trusted advisory guidance before applying compensating controls..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.