Unrated severityNVD Advisory· Published Jun 8, 2010· Updated Apr 29, 2026

CVE-2010-1880

Description

Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "MJPEG Media Decompression Vulnerability."

Affected products

Microsoft/Directx4 versions
cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:directx:9.0a:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:directx:9.0b:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:directx:9.0c:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.us-cert.gov/cas/techalerts/TA10-159B.htmlnvdUS Government Resource
osvdb.org/65222nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-033nvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6641nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.048
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000