CVE-2010-1879

Published: Jun 8, 2010Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "Media Decompression Vulnerability."

Affected (10)

Products: Microsoft: Directx, Windows Media Format Runtime, Windows Media Encoder

Microsoft

3 products

Directx

Windows Media Format Runtime

Windows Media Encoder

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Directx	Version 9.0
Microsoft Directx	Version 9.0a
Microsoft Directx	Version 9.0b
Microsoft Directx	Version 9.0c

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows Media Format Runtime	Version 11
Microsoft Windows Media Format Runtime	Version 9.5
Microsoft Windows Media Format Runtime	Version 9.5
Microsoft Windows Media Format Runtime	Version 9