Title

Microsoft Windows Media Format Runtime Remote Code Execution Vulnerability (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a remote code execution vulnerability in Microsoft Windows. To exploit this vulnerability, an attacker would entice a user to access a malicious media file by hosting it on a malicious or compromised web site. If successfully exploited, this vulnerability would allow an attacker to execute arbitrary code and compromise the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-39212

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.