Summary
The host is installed with Windows Media Player and is prone to buffer overflow vulnerability.
Impact
Successful exploitation will lets attacker execute arbitrary codes in the context of the affected player.
Impact Level: System/Application
Solution
No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore.
General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one.
Insight
This flaw is due to a boundary checking error while opening a specially-crafted '.mpg' audio files.
Affected
Windows Media Player version 9.x and 11 to 11.0.5721.5145.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2010-0718 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P
Related Vulnerabilities
- XnView Multiple Image Decompression Heap Overflow Vulnerabilities (Windows)
- ICQ 'ICQToolBar.dll' Buffer Overflow Vulnerability
- ScriptFTP 'GETLIST' or 'GETFILE' Commands Remote Buffer Overflow Vulnerability
- ImageMagick Integer Overflow Vulnerability - 02 June13 (Windows)
- Dnsmasq TFTP Service multiple vulnerabilities