CVE-2011-0042

7.8 HIGH
Published: March 09, 2011 Modified: April 29, 2026
View on NVD

Description

SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital Video Recording (.dvr-ms) files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DVR-MS Vulnerability."

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://osvdb.org/71016
Source: secure@microsoft.com
http://secunia.com/advisories/43626
Source: secure@microsoft.com
http://www.securityfocus.com/bid/46680
Source: secure@microsoft.com
http://www.securitytracker.com/id?1025169
Source: secure@microsoft.com
http://www.us-cert.gov/cas/techalerts/TA11-067A.html
Source: secure@microsoft.com
US Government Resource
http://osvdb.org/71016
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/43626
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/46680
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1025169
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.us-cert.gov/cas/techalerts/TA11-067A.html
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.vupen.com/english/advisories/2011/0615
Source: af854a3a-2127-422b-91ae-364da2661108

16 reference(s) from NVD

Quick Stats

CVSS v3 Score
7.8 / 10.0
EPSS (Exploit Probability)
63.2%
98th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

microsoft