CVE-2010-0268
Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 20.1%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote Code Execution Vulnerability."
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 20.12% probability · 97th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/windows media player · microsoft/windows 2000 · microsoft/windows xp
- Source
- secure@microsoft.com
References
- http://www.us-cert.gov/cas/techalerts/TA10-103A.htmlUS Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-027
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7281
- http://www.us-cert.gov/cas/techalerts/TA10-103A.htmlUS Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-027
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7281
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.