CVE-2010-0268: Microsoft Windows 2000

High severity, CVSS 9.3. EPSS: 20.1% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote Code Execution Vulnerability."

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows Media Player: version 9 only
• Microsoft Windows XP: any version

Published 2010-04-14. Last modified 2026-06-16.