CVE-2010-1042

2010-03-2300:53:22

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

7.8

Confidence

High

EPSS

0.969

Percentile

99.7%

JSON

Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .AVI file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd

Node

microsoftwindows_media_playerMatch11

microsoftwindows_media_playerMatch11.0.5721.5145

microsoftwindows_media_playerMatch11.0.6000.6324

VendorProductVersionCPE
microsoftwindows_media_player11cpe:2.3:a:microsoft:windows_media_player:11:*:*:*:*:*:*:*
microsoftwindows_media_player11.0.5721.5145cpe:2.3:a:microsoft:windows_media_player:11.0.5721.5145:*:*:*:*:*:*:*
microsoftwindows_media_player11.0.6000.6324cpe:2.3:a:microsoft:windows_media_player:11.0.6000.6324:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_media_player	11	cpe:2.3:a:microsoft:windows_media_player:11:::::::*
microsoft	windows_media_player	11.0.5721.5145	cpe:2.3:a:microsoft:windows_media_player:11.0.5721.5145:::::::*
microsoft	windows_media_player	11.0.6000.6324	cpe:2.3:a:microsoft:windows_media_player:11.0.6000.6324:::::::*