Lucene search

[email protected]CVE-2011-0042

HistoryMar 09, 2011 - 11:00 p.m.

CVE-2011-0042

2011-03-0923:00:01

CWE-20

[email protected]

web.nvd.nist.gov

sbe.dll

windows media player

windows media center

vulnerability

cve-2011-0042

dvr-ms

remote code execution

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.56 Medium

EPSS

Percentile

97.7%

JSON

SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital Video Recording (.dvr-ms) files, which allows remote attackers to execute arbitrary code via a crafted file, aka “DVR-MS Vulnerability.”

Affected configurations

NVD

Node

microsoftwindows_xp_media_centerMatch2005sp3

microsoftwindows_7Match-

microsoftwindows_7Match-sp1x64

microsoftwindows_7Match-sp1x86

microsoftwindows_vistasp1

microsoftwindows_vistasp2

microsoftwindows_xpsp2x64

microsoftwindows_xpsp3

Node

microsoftwindows_media_center_tv_pack

AND

microsoftwindows_vistax32

microsoftwindows_vistax64

CPENameOperatorVersion
microsoft:windows_xp_media_centermicrosoft windows xp media centereq2005
microsoft:windows_7microsoft windows 7eq-
microsoft:windows_vistamicrosoft windows vistaeq*
microsoft:windows_xpmicrosoft windows xpeq*

CPE	Name	Operator	Version
microsoft:windows_xp_media_center	microsoft windows xp media center	eq	2005
microsoft:windows_7	microsoft windows 7	eq	-
microsoft:windows_vista	microsoft windows vista	eq	*
microsoft:windows_xp	microsoft windows xp	eq	*