cbcvebase.
CVE-2010-2745
published 2010-10-13

CVE-2010-2745: Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote…

PriorityP262critical9.3CVSS 2.0
AVNACMAuNCCICAC
EXPLOIT
EPSS
24.25%
97.6th percentile
Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka "Windows Media Player Memory Corruption Vulnerability."

Affected

4 ranges
VendorProductVersion rangeFixed in
microsoftwindows_media_player——
microsoftwindows_media_player——
microsoftwindows_media_player——
microsoftwindows_media_player——

Detection & IOCsextracted from sources · hover to see the quote

commandlocation.reload()↗
commandoWrapper.innerHTML = ''↗
  • →Exploit triggers via browser reload (location.reload()) while a WMP object is embedded in the DOM — monitor for rapid reload sequences on pages containing embedded WMP ActiveX objects ↗
  • →Attack vector uses innerHTML manipulation to remove the WMP wrapper element followed by a timed callback (setTimeout) — look for DOM manipulation patterns that destroy WMP object containers combined with page reloads ↗
  • →Exploit targets Firefox 3.5.10 and 3.6.6 with WMP 10 and 11 on Windows XP SP3 — alert on these specific browser/plugin version combinations in network telemetry or endpoint inventory ↗
  • →Crafted media content is delivered via an HTML document referencing WMP — inspect HTML pages embedding WMP objects (e.g., object/embed tags with classid for WMP) served from untrusted origins ↗
  • ·Exploit is user-assisted — requires the victim to interact with or visit the malicious page; drive-by without user interaction is not confirmed ↗
  • ·Affected WMP versions are 9 through 12; detection rules should cover this full range and not be scoped only to WMP 10/11 used in the PoC ↗
  • ·PoC was sourced from an external bug tracker; reliability and completeness of the exploit code may vary ↗
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.