CVE-2010-1880: Code Injection
Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "MJPEG Media Decompression Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1880?
CVE-2010-1880 is classified as a critical vulnerability that may allow remote code execution on affected systems.
How do I fix CVE-2010-1880?
To mitigate CVE-2010-1880, users should apply the latest security updates for affected versions of Microsoft Windows and DirectX.
Which systems are affected by CVE-2010-1880?
CVE-2010-1880 affects Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 with specific versions of DirectX.
Can CVE-2010-1880 be exploited by local users?
CVE-2010-1880 primarily allows remote attackers to exploit the vulnerability, thus local users typically cannot exploit it without remote conditions.
What type of vulnerability is CVE-2010-1880?
CVE-2010-1880 is a media file vulnerability related to MJPEG media decompression, affecting how media files are processed by DirectShow.