CVE-2010-2586

CVE-2010-2586 describes multiple integer overflow vulnerabilities in the in_nsv.dll plugin within Winamp versions prior to 5.6. These flaws allow remote attackers to execute arbitrary code by crafting NSV streams or files with malicious Table of Contents (TOC) data, leading to a heap-based buffer overflow. With a CVSS score of 9.3, this vulnerability is critical, indicating a network-based attack with medium complexity that can result in complete compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code, or significant community discussion has been identified, its high FAUCET Risk Score of 87/100 and EPSS score suggest a notable potential for future exploitation.