Lucene search
MicrosoftCVE-2011-3401HistoryDec 14, 2011 - 12:55 a.m.
CVE-2011-3401
2011-12-1400:55:01
CWE-94
microsoft
web.nvd.nist.gov
29
cve-2011-3401
encdec.dll
windows media player
media center
microsoft windows
xp
vista
windows 7
remote code execution
memory corruption
vulnerability
nvd
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.947
Percentile
99.3%
ENCDEC.DLL in Windows Media Player and Media Center in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .dvr-ms file, aka βWindows Media Player DVR-MS Memory Corruption Vulnerability.β
Affected configurations
Node
microsoftwindows_7Match-
ORmicrosoftwindows_7Match-sp1x64
ORmicrosoftwindows_7Match-sp1x86
ORmicrosoftwindows_vistasp2
ORmicrosoftwindows_xpsp3
ORmicrosoftwindows_xpMatch-sp2x64
ORmicrosoftwindows_xpMatch2005sp3media_center
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_7 | - | cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:* |
| microsoft | windows_7 | - | cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:* |
| microsoft | windows_7 | - | cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:* |
| microsoft | windows_vista | * | cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:* |
| microsoft | windows_xp | * | cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:* |
| microsoft | windows_xp | - | cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:* |
| microsoft | windows_xp | 2005 | cpe:2.3:o:microsoft:windows_xp:2005:sp3:media_center:*:*:*:*:* |
Related
checkpoint_advisories
checkpoint_advisories
mskb
mskb
nvd
nvd
CVE-2011-3401
2011-12-14 00:55:01
cvelist
cvelist
CVE-2011-3401
2011-12-14 00:00:00
openvas
openvas
Microsoft Windows Media Remote Code Execution Vulnerability (2648048)
2011-12-14 00:00:00
Microsoft Windows Media Remote Code Execution Vulnerability (2648048)
2011-12-14 00:00:00
securityvulns
securityvulns
Microsoft Windows Media memory corruption
2011-12-15 00:00:00
prion
prion
Memory corruption
2011-12-14 00:55:00
nessus
nessus
seebug
seebug
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.947
Percentile
99.3%
Related for CVE-2011-3401