Executive Summary

Summary
TitleVulnerability in Windows Media Player Could Allow Remote Code Execution (979402)
Informations
NameMS10-027First vendor Publication2010-04-13
VendorMicrosoftLast vendor Modification2010-04-13
Severity (Vendor) CriticalRevision1.0

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score9.3Attack RangeNetwork
Cvss Impact Score10Attack ComplexityMedium
Cvss Expoit Score8.6AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

Revision Note: V1.0 (April 13, 2010): Bulletin published.

Summary: This security update resolves a privately reported vulnerability in Windows Media Player. The vulnerability could allow remote code execution if Windows Media Player opened specially crafted media content hosted on a malicious Web site. An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Original Source

Url : http://www.microsoft.com/technet/security/bulletin/MS10-027.mspx

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:7281
 
Oval ID: oval:org.mitre.oval:def:7281
Title: Media Player Remote Code Execution Vulnerability
Description: Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote Code Execution Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2010-0268
Version: 3
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Product(s): Windows Media Player 9
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1
Os1
Os2

OpenVAS Exploits

DateDescription
2010-04-14Name : Microsoft Windows Media Player Could Allow Remote Code Execution (979402)
File : nvt/secpod_ms10-027.nasl

Open Source Vulnerability Database (OSVDB)

idDescription
63765Microsoft Windows Media Player ActiveX fourCC Compression Code Codec Retrieva...

Information Assurance Vulnerability Management (IAVM)

DateDescription
2010-04-15IAVM : 2010-A-0052 - Microsoft Windows Media Player Remote Code Execution Vulnerability
Severity : Category II - VMSKEY : V0024002

Snort® IPS/IDS

DateDescription
2014-01-10Microsoft Windows Media Player ActiveX unknow compression algorithm use arbit...
RuleID : 18542 - Revision : 7 - Type : BROWSER-PLUGINS
2014-01-10Microsoft Windows Media Player ActiveX unknow compression algorithm use arbit...
RuleID : 16537 - Revision : 8 - Type : BROWSER-PLUGINS

Nessus® Vulnerability Scanner

DateDescription
2010-04-13Name : The remote Windows host has an ActiveX control that is affected by a code exe...
File : smb_nt_ms10-027.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
1
2
DateInformations
2014-02-17 11:46:32
  • Multiple Updates
2014-01-19 21:30:28
  • Multiple Updates
2013-11-11 12:41:17
  • Multiple Updates