CVE-2010-1880

CWE-94 — Code Injection3 documents3 sources
Severity
9.3CRITICAL
EPSS
59.8%
top 1.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Directx
Timeline
PublishedJun 8
Latest updateMay 14

Description

Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "MJPEG Media Decompression Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDmicrosoft/directx4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-7q7f-5rv3-vf4f: Unspecified vulnerability in Quartz↗2022-05-14
▶
CVEList
CVE-2010-1880: Unspecified vulnerability in Quartz↗2010-06-08
▶
CVE-2010-1880 (CRITICAL CVSS 9.3) | Unspecified vulnerability in Quartz | cvebase.io