Unscored severity · published Oct 13, 2010
CVE-2010-2745
Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute…
–
CVSS
23.8%
EPSS
No
On KEV
Description
Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka "Windows Media Player Memory Corruption Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)23.8% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WM
Windows Media Player · Microsoft
9; 10; 11; 12 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2745
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2745
www.securitytracker.com
http://www.securitytracker.com/id?1024550
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA10-285A.html
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-082
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6653
More from Windows Media Player
7.8
CVE-2002-1844
Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the…
2.5
CVE-2017-11768
Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows…
–
CVE-2015-1728
Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject…
–
CVE-2014-2671
Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a…
–
CVE-2013-3127
The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player…