PT-2010-2544 · Microsoft · Vista+5

Matthew Watchinski · Publicado 2010-09-15 · Atualizado 2023-12-07 · CVE-2010-0818

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Media codecs versions in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2

Description A remote code execution issue exists due to improper handling of crafted media content with MPEG-4 video encoding. This could allow code execution if a user opens a specially crafted media file. An attacker who successfully exploits this issue could take complete control of an affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. The impact may be less severe for users with fewer user rights on the system.

Recommendations For Windows XP SP2 and SP3, update to address the issue. For Server 2003 SP2, apply the necessary patch to resolve the vulnerability. For Vista SP1 and SP2, install the available update to fix the issue. For Server 2008 Gold and SP2, apply the required patch to mitigate the risk.

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2010-0818

Produtos afetados

Server 2003

Server 2008

Vista

Windows

Windows Media Codecs

Windows Xp

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2010-0818 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0818 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7318 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-062 · Aviso do Fabricante
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-062 · Nota