CVE-2011-0042 SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7...
HighCVSS 9.3
EPSS 33.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital Video Recording (.dvr-ms) files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DVR-MS Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows xp media center | = 2005-sp3 | No fix listed |
| Microsoft windows 7 | All versions | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
| Microsoft windows media center tv pack | All versions | No fix listed |
References
- 71016 vdb-entry
- 43626 third-party-advisory
- 46680 vdb-entry
- 1025169 vdb-entry
- TA11-067A third-party-advisory us-government-resource
- ADV-2011-0615 vdb-entry
- MS11-015 vendor-advisory
- oval:org.mitre.oval:def:12281 signature vdb-entry