PT-2010-2763 · Microsoft · Windows Media Player

Published 2010-03-22 · Updated 2017-08-17 · CVE-2010-1042

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Player version 11

Description The issue is related to improper colorspace conversion, which can be exploited by remote attackers using a crafted .AVI file. This can lead to a denial of service due to memory corruption or potentially allow the execution of arbitrary code.

Recommendations For Microsoft Windows Media Player version 11, consider avoiding the use of crafted .AVI files until a fix is available. As a temporary workaround, restrict the playback of .AVI files in Windows Media Player to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2010-1042

Affected Products

Windows Media Player

References · 4

• 🔥 http://securityfocus.com/bid/38790 · Exploit
• 🔥 https://exploit-db.com/exploits/33770 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-1042 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57205 · Note