CVE-2010-1880

2010-06-0822:30:00

CWE-94

[email protected]

web.nvd.nist.gov

vulnerability

quartz.dll

directshow

microsoft windows

remote attackers

arbitrary code

media file

compression data

mjpeg media decompression vulnerability

cve-2010-1880

nvd

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.896 High

EPSS

Percentile

98.8%

JSON

Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka “MJPEG Media Decompression Vulnerability.”

CPENameOperatorVersion
microsoft:directxmicrosoft directxeq9.0
microsoft:directxmicrosoft directxeq9.0a
microsoft:directxmicrosoft directxeq9.0b
microsoft:directxmicrosoft directxeq9.0c

CPE	Name	Operator	Version
microsoft:directx	microsoft directx	eq	9.0
microsoft:directx	microsoft directx	eq	9.0a
microsoft:directx	microsoft directx	eq	9.0b
microsoft:directx	microsoft directx	eq	9.0c