VULNERABILITY INTELLIGENCE
CVE-2010-2745
CVSS score9.3 HIGH
EPSS probability23.83%
CISA KEVNot currently listed
Published2010-10-13
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka "Windows Media Player Memory Corruption Vulnerability."
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')