March 2017 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2

March 2017 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1 and Windows Server 2012 R2: MS17-022 Security update for Microsoft XML Core Services MS17-021 Security update for DirectShow...

March 2017 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2

March 2017 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1 and Windows Server 2012 R2: MS17-022 Security update for Microsoft XML Core Services MS17-021 Security update for DirectShow MS17-0...

March 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1

March 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This security update resolves the following vulnerabilities in Windows 7 SP1 and Windows Server 2008 R2 SP1: MS17-022 Security update for Microsoft XML Core Services MS17-021 Security update for...

Windows DirectShow Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way Windows DirectShow handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a target system. In a web-based attack scenario, an attacker could host a website used to...

Microsoft Windows DirectShow Information Disclosure (MS17-021: CVE-2017-0042)

An information disclosure vulnerability exists in Windows DirectShow. The vulnerability is due to the way Windows DirectShow handles objects in memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Microsoft Windows DirectShow CVE-2017-0042 Information Disclosure Vulnerability

Description Microsoft Windows DirectShow is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...

KLA10988 Information disclosure vulnerability in Windows DirectShow

An improper objects handling in memory was found in Windows DirectShow. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed website. Original advisories MS17-021 CVE-2017-0042 Exploitation Public...

MS17-021: Security update for Windows DirectShow: March 14, 2017

Resolves a vulnerability in Windows that could allow information disclosure if Windows DirectShow opens specially crafted media content that is hosted on a malicious website.SummaryThis security update resolves a vulnerability in Microsoft Windows. This vulnerability could allow information...

Windows Data Compromise

The vulnerability in DirectShow allows for an increase in privilege levels...

Windows Desktop Experience Data Compromise

The vulnerability in DirectShow allows for an increase in privilege levels...

Windows Privilege Escalation

The vulnerability exists in Microsoft DirectShow and is related to the processing of specially crafted JPEG graphic files. Exploiting this vulnerability allows for the execution of code remotely, provided that the user opens a specially crafted graphic file. Exploiting this vulnerability also...

Windows Code Execution

The vulnerability of the DirectShow component in the Windows operating system arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

Microsoft Windows Arbitrary Code Execution Vulnerability (CNVD-2016-00255)

Microsoft Windows is a popular operating system. A heap corruption remote code execution vulnerability exists in DirectShow for Microsoft Windows that could allow a remote attacker to crash an application or execute arbitrary code via a constructed file that the user is tricked into parsing...

CVE-2016-0015

DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file, aka "DirectShow Heap Corruption Remote Code...

CVE-2016-0015

DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file, aka "DirectShow Heap Corruption Remote Code...

Remote code execution

DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file, aka "DirectShow Heap Corruption Remote Code...

CVE-2016-0015

DirectShow Heap Corruption Remote Code Execution (CVE-2016-0015) affects Windows components listed in the CVE, with the vulnerability arising from improper validation in DirectShow. An attacker could trigger arbitrary-code execution by convincing a user to open a crafted file, potentially gaining...

CVE-2016-0015: Improper Restriction of Operations within the Bounds of a Memory Buffer

DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file, aka "DirectShow Heap Corruption Remote Code...

MS16-007: Security Update for Microsoft Windows to Address Remote Code Execution (3124901)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple elevation of privilege vulnerabilities exist due to improper validation of user-supplied input before loading DLL files. A local attacker can exploit these, via a crafted...

Microsoft DirectShow Heap Corruption Remote Code Execution (MS16-007: CVE-2016-0015)

A remote code execution vulnerability has been reported in Microsoft DirectShow. The vulnerability is due to the way Microsoft DirectShow improperly validates input. A remote attacker could exploit this vulnerability by enticing a target user to open a specially crafted file...