CVE-2010-1042: Microsoft Windows Media Player

Medium severity, CVSS 4.3. EPSS: 10.3% chance of exploitation in the next 30 days.

Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .AVI file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

• Microsoft Windows Media Player: version 11 only; version 11.0.5721.5145 only; version 11.0.6000.6324 only

Published 2010-03-23. Last modified 2026-06-16.