← Database

CVE-2010-2745

CRITICAL CVSS: 9.3 Published: 2010-10-13 Modified: 2026-06-16

Description

Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka "Windows Media Player Memory Corruption Vulnerability."

Affected Platforms

Microsoft Windows 7Microsoft Windows Media PlayerMicrosoft Windows XpMicrosoft Windows Server 2003Microsoft Windows Server 2008Microsoft Windows VistaMicrosoft Windows 2003 Server

Weakness Type

CWE-94

References