CVE-2011-0042

Name of the Vulnerable Software and Affected Versions Windows Media Player and Windows Media Center versions prior to the fixed version

Description A remote code execution issue exists in the way Windows Media Player and Windows Media Center handle Digital Video Recording (.dvr-ms) files. This allows remote attackers to execute arbitrary code via a crafted file. An attacker could then install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Windows Media Player and Windows Media Center, update to a version that properly parses .dvr-ms files to prevent remote code execution. As a temporary workaround, consider avoiding the use of .dvr-ms files in Windows Media Player and Windows Media Center until a patch is available.