Description
Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "Media Decompression Vulnerability."
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7517
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-033
US Government Resource third-party-advisory
x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA10-159B.html
Scores
EPSS
0.2028
EPSS Percentile
97.2%
Details
CWE
CWE-94
Status
published
Products (8)
microsoft/directx
9.0
microsoft/directx
9.0a
microsoft/directx
9.0b
microsoft/directx
9.0c
microsoft/windows_media_encoder
9 (2 CPE variants)
microsoft/windows_media_format_runtime
9
microsoft/windows_media_format_runtime
9.5 (2 CPE variants)
microsoft/windows_media_format_runtime
11
Published
Jun 08, 2010
Tracked Since
Feb 18, 2026