Lucene search

K
cveMitreCVE-2010-1042
HistoryMar 23, 2010 - 12:53 a.m.

CVE-2010-1042

2010-03-2300:53:22
mitre
web.nvd.nist.gov
29
cve-2010-1042
microsoft
windows media player 11
colorspace conversion
remote attackers
denial of service
memory corruption
arbitrary code
avi file
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

8.1

Confidence

High

EPSS

0.969

Percentile

99.7%

Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .AVI file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd
Node
microsoftwindows_media_playerMatch11
OR
microsoftwindows_media_playerMatch11.0.5721.5145
OR
microsoftwindows_media_playerMatch11.0.6000.6324
VendorProductVersionCPE
microsoftwindows_media_player11cpe:2.3:a:microsoft:windows_media_player:11:*:*:*:*:*:*:*
microsoftwindows_media_player11.0.5721.5145cpe:2.3:a:microsoft:windows_media_player:11.0.5721.5145:*:*:*:*:*:*:*
microsoftwindows_media_player11.0.6000.6324cpe:2.3:a:microsoft:windows_media_player:11.0.6000.6324:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

8.1

Confidence

High

EPSS

0.969

Percentile

99.7%

Related for CVE-2010-1042