High · 7.8 CVE-2011-0042 EUVD-2011-0068GHSA-hvf6-hpg3-c749

SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media …

Published Mar 9, 2011 · Updated Jan 21, 2025 · Assigned by microsoft

Description

SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital Video Recording (.dvr-ms) files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DVR-MS Vulnerability."

References

ADV-2011-0615 vdb-entry
TA11-067A third-party-advisory
oval:org.mitre.oval:def:12281 vdb-entry signature
43626 third-party-advisory
71016 vdb-entry
MS11-015 vendor-advisory
1025169 vdb-entry
46680 vdb-entry