PT-2010-2763 · Microsoft · Windows Media Player

Publicado 2010-03-22 · Atualizado 2017-08-17 · CVE-2010-1042

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Player version 11

Description The issue is related to improper colorspace conversion, which can be exploited by remote attackers using a crafted .AVI file. This can lead to a denial of service due to memory corruption or potentially allow the execution of arbitrary code.

Recommendations For Microsoft Windows Media Player version 11, consider avoiding the use of crafted .AVI files until a fix is available. As a temporary workaround, restrict the playback of .AVI files in Windows Media Player to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2010-1042

Produtos afetados

Windows Media Player

Referências · 4

• 🔥 http://securityfocus.com/bid/38790 · Exploit
• 🔥 https://exploit-db.com/exploits/33770 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57205 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-1042 · Nota de Segurança