Microsoft Windows Movie Maker vulnerabilities

4 CVEs affecting Microsoft Windows Movie Maker, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-4858, published 2013-12-30.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-0265, published 2010-03-10. High severity, CVSS 9.3. EPSS: 26.6% chance of exploitation in the next 30 days. Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie…
• CVE-2010-2564, published 2010-08-11. High severity, CVSS 9.3. EPSS: 22.6% chance of exploitation in the next 30 days. Buffer overflow in Microsoft Windows Movie Maker (WMM) 2.1, 2.6, and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted project file,…
• CVE-2010-3967, published 2010-12-16. High severity, CVSS 9.3. EPSS: 20.5% chance of exploitation in the next 30 days. Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a…
• CVE-2013-4858, published 2013-12-30. Medium severity, CVSS 4.3. EPSS: 13.3% chance of exploitation in the next 30 days. Microsoft Windows Movie Maker 2.1.4026.0 on Windows XP SP3 allows remote attackers to cause a denial of service (application crash) via a crafted .wav file, as demonstrated by movieMaker.wav.