CVE-2011-0042
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Windows Media Player，是微软公司出品的一款免费的播放器，是Microsoft Windows的一个组件，通常简称"WMP"。Windows Media Center多媒体娱乐中心，它是一种运行于Windows Vista操作系统上的多媒体应用程序。 Microsoft Windows Media Player和Windows Media Center在处理特制媒体内容时存在远程代码执行漏洞，远程攻击者可利用这些漏洞控制受影响系统。 1)DirectShow以不安全的方式加载某些库，通过
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2011-0042
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital Video Recording (.dvr-ms) files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DVR-MS Vulnerability."
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Windows Media Player和Windows Media Center 'dvr-ms'文件代码执行漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Windows Media Player，是微软公司出品的一款免费的播放器，是Microsoft Windows的一个组件，通常简称"WMP"。Windows Media Center多媒体娱乐中心，它是一种运行于Windows Vista操作系统上的多媒体应用程序。 Microsoft Windows Media Player和Windows Media Center在处理特制媒体内容时存在远程代码执行漏洞，远程攻击者可利用这些漏洞控制受影响系统。 1)DirectShow以不安全的方式加载某些库，通过
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2011-0042
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2011-0042
请登录查看更多情报信息。
Vendor Advisories for CVE-2011-0042 (7)
-
-
-
-
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-015 vendor-advisory x_refsource_MS
-
-
Same Patch Batch · n/a · 2011-03-09 · 6 CVEs total
| CVE-2011-0029 | Microsoft Windows Remote Desktop Client不安全库加载漏洞 | |
| CVE-2011-0032 | Microsoft Windows多个平台DirectShow和Windows Media Center不安全库加载漏洞 | |
| CVE-2011-0464 | Novell Vibe OnPrem远程代码执行漏洞 | |
| CVE-2011-1099 | FocalMedia Quick Polls多个目录遍历漏洞 | |
| CVE-2011-1343 | IBM Tivoli Netcool/OMNIbus Web GUI SQL注入漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2011-0042
No comments yet