HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2010-2745

CVSS 9.3v2.0pub. 2010-10-13upd. 2026-04-29

Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka "Windows Media Player Memory Corruption Vulnerability."

CVSS Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Microsoft Windows 2003 Server

    OS
    Microsoft
    all versions

  • Microsoft Windows 7

    OS
    Microsoft
    all versions

  • Microsoft Windows Media Player

    APP
    Microsoft
    1011129

  • Microsoft Windows Server 2003

    OS
    Microsoft
    all versions

  • Microsoft Windows Server 2008

    OS
    Microsoft
    r2

  • Microsoft Windows Vista

    OS
    Microsoft
    all versions

  • Microsoft Windows Xp

    OS
    Microsoft
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2020-1350CRITICAL10.0⚠ KEVPL ✓same product

RCE w Windows DNS Server — krytyczna podatność SIGRed (CVSS 10.0)

CVE-2020-1040CRITICAL9.0⚠ KEVPL ✓same product

RCE w Hyper-V RemoteFX vGPU — błąd walidacji wejścia od gościa

CVE-2020-0646CRITICAL9.8⚠ KEVPL ✓same product

RCE w Microsoft .NET Framework — nieprawidłowa walidacja danych wejściowych

CVE-2019-0708CRITICAL9.8⚠ KEVPL ✓same product

BlueKeep — krytyczny RCE w Remote Desktop Services (RDP)

CVE-2017-8543CRITICAL9.8⚠ KEVPL ✓same product

RCE w Windows Search — przejęcie kontroli nad systemem