CVE-2010-2564: Microsoft Windows Movie Maker

High severity, CVSS 9.3. EPSS: 22.6% chance of exploitation in the next 30 days.

Buffer overflow in Microsoft Windows Movie Maker (WMM) 2.1, 2.6, and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted project file, aka "Movie Maker Memory Corruption Vulnerability."

Affected products

• Microsoft Windows Movie Maker: version 2.1 only; version 2.6 only; version 6.0 only

Published 2010-08-11. Last modified 2026-06-16.