Lucene search

K
cve[email protected]CVE-2010-1880
HistoryJun 08, 2010 - 10:30 p.m.

CVE-2010-1880

2010-06-0822:30:01
CWE-94
web.nvd.nist.gov
33
vulnerability
quartz.dll
directshow
microsoft windows
remote attackers
arbitrary code
media file
compression data
mjpeg media decompression vulnerability
cve-2010-1880
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.886 High

EPSS

Percentile

98.7%

Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka β€œMJPEG Media Decompression Vulnerability.”

Affected configurations

NVD
Node
microsoftdirectxMatch9.0
OR
microsoftdirectxMatch9.0a
OR
microsoftdirectxMatch9.0b
OR
microsoftdirectxMatch9.0c
AND
microsoftwindows_2000sp4
OR
microsoftwindows_2003_serversp2
OR
microsoftwindows_2003_serversp2x64
OR
microsoftwindows_server_2008itanium
OR
microsoftwindows_server_2008x32
OR
microsoftwindows_server_2008x64
OR
microsoftwindows_vistasp1
OR
microsoftwindows_vistaMatch-sp1
OR
microsoftwindows_xpsp2
OR
microsoftwindows_xpsp3
OR
microsoftwindows_xpMatch-sp2x64

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.886 High

EPSS

Percentile

98.7%