CVE-2010-1879

2010-06-0822:30:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2010-1879

media decompression vulnerability

windows media

directshow

remote code execution

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.928 High

EPSS

Percentile

99.0%

JSON

Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka “Media Decompression Vulnerability.”

CPENameOperatorVersion
microsoft:directxmicrosoft directxeq9.0a
microsoft:directxmicrosoft directxeq9.0b
microsoft:directxmicrosoft directxeq9.0c
microsoft:directxmicrosoft directxeq9.0
microsoft:windows_media_format_runtimemicrosoft windows media format runtimeeq9
microsoft:windows_media_format_runtimemicrosoft windows media format runtimeeq9.5
microsoft:windows_media_format_runtimemicrosoft windows media format runtimeeq11
microsoft:windows_media_encodermicrosoft windows media encodereq9

CPE	Name	Operator	Version
microsoft:directx	microsoft directx	eq	9.0a
microsoft:directx	microsoft directx	eq	9.0b
microsoft:directx	microsoft directx	eq	9.0c
microsoft:directx	microsoft directx	eq	9.0
microsoft:windows_media_format_runtime	microsoft windows media format runtime	eq	9
microsoft:windows_media_format_runtime	microsoft windows media format runtime	eq	9.5
microsoft:windows_media_format_runtime	microsoft windows media format runtime	eq	11
microsoft:windows_media_encoder	microsoft windows media encoder	eq	9