296 matches found
Microsoft Windows DirectShow Filters Remote Code Execution (MS12-004; CVE-2012-0004)
A remote code execution vulnerability has been reported in Microsoft Windows...
MS12-004: Description of the security update for DirectShow: January 10, 2012
None None...
MS12-004: Vulnerabilities in Windows Media Could Allow Remote Code Execution (2636391)
The version of Windows Media installed on the remote host is affected by one or both of the following vulnerabilities : - The Winmm.dll library as used by Windows Media Player does not properly handle specially crafted MIDI files. CVE-2012-0003 - A DirectShow component of DirectX does not properl...
MS11-076: Description of the security update for Windows Media Center: October 11, 2011
None None...
CVE-2011-0032
Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as...
Design/Logic Flaw
Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as...
CVE-2011-0032
CVE-2011-0032 is an Untrusted search path vulnerability in DirectShow loading DLLs from the current working directory, allowing local privilege escalation. Affected: Windows Vista SP1/SP2, Windows 7 (Gold/SP1), Windows Server 2008 R2/R2 SP1, and Windows Media Center TV Pack for Vista. Root cause:...
CVE-2011-0032
Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as...
PT-2011-2029 · Microsoft · Directshow +5
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista SP1 and SP2 Microsoft Windows 7 Gold and SP1 Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows Media Center TV Pack for Windows Vista Description: The issue allows local users to gain privileges via a Troja...
Microsoft Windows Media Remote Code Execution Vulnerabilities (2510030)
This host is missing a critical security update according to Microsoft Bulletin MS11-015. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Media Remote Code Execution Vulnerabilities (2510030)
This host is missing a critical security update according to Microsoft Bulletin MS11-015. OpenVAS Vulnerability Test $Id: secpodms11-015.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft Windows Media Remote Code Execution Vulnerabilities 2510030 Authors: Sooraj KS Copyright: Copyright c 2011...
Microsoft Fills Windows, Office Holes with March Patch Release
Microsoft Corp. issued their monthly security bulletins on Tuesday, with fixes for four known vulnerabilities in the company’s Windows operating system, Office suite and Remote Desktop Connection products. The March patch release included three bulletins: MS11-015, 016 and 017. Only one, MS11-015...
MS11-015: Vulnerability in Microsoft DirectShow could allow remote code execution: March 8, 2011
Resolves vulnerabilities in Windows Media Player and Windows Media Center that could allow remote code execution if a user opens a specially crafted Microsoft Digital Video Recording .dvr-ms file.Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security...
MS11-015: Vulnerabilities in Windows Media Could Allow Remote Code Execution (2510030)
The remote Windows host has at least one of the following vulnerabilities in Media Player or Media Center : - DirectShow does not adequately restrict the path used for loading external libraries. A remote attacker could exploit this by tricking a user into opening a specially crafted file,...
Microsoft DirectShow DLL Loading Arbitrary Code Execution Vulnerability
Description Microsoft DirectShow is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link...
Microsoft Media Player ehtrace.dll Insecure Library Loading (MS11-015; CVE-2011-0032)
DirectShow is a DirectX low-level Application Programming Interface API used by Windows programs for multimedia support. Within DirectX, the DirectShow technology performs client-side audio and video sourcing, manipulation, and rendering. A remote code execution vulnerability has been reported in...
Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)
This host is missing a critical security update according to Microsoft Bulletin MS07-064. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)
This host is missing a critical security update according to Microsoft Bulletin MS07-064. OpenVAS Vulnerability Test $Id: gbms07-064.nasl 5362 2017-02-20 12:46:39Z cfi $ Vulnerabilities in DirectX Could Allow Remote Code Execution 941568 Authors: Madhuri D Copyright: Copyright c 2011 Greenbone...
CVE-2010-1882
Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via an MPEG Layer-3 audio stream in 1 a crafted media file or 2 crafted streaming content, aka...
Buffer overflow
Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via an MPEG Layer-3 audio stream in 1 a crafted media file or 2 crafted streaming content, aka...