Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks.
https://exchange.xforce.ibmcloud.com/vulnerabilities/61278
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000027.html
http://jvn.jp/en/jp/JVN54336184/index.html
Source: Mitre, NVD
Published: 2010-08-25
Updated: 2026-06-16
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Severity: Critical
Base Score: 9.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.00349