CVE-2011-0042
- State
- Published
- Severity
- 7.8 High
- Published
- Mar 9, 2011
- Updated
- Jan 21, 2025
- Reserved
- Dec 10, 2010
Description
SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital Video Recording (.dvr-ms) files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DVR-MS Vulnerability."
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ADV-2011-0615vdb-entry
- TA11-067Athird-party-advisory
- oval:org.mitre.oval:def:12281vdb-entrysignature
- 43626third-party-advisory
- 71016vdb-entry
- MS11-015vendor-advisory
- 1025169vdb-entry
- 46680vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.