2 matches found
CVE-2011-3401: Improper Control of Generation of Code
ENCDEC.DLL in Windows Media Player and Media Center in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .dvr-ms file, aka "Windows Media Player DVR-MS Memory Corruption Vulnerability."...
9.3CVSS6.5AI score0.2074EPSS
SaveExploits1References2
CVE-2011-3401
This CVE affects Microsoft Windows Media Player and Windows Media Center (XP SP2/SP3, Vista SP2, Windows 7 SP1). The root cause is memory corruption when parsing specially crafted DVR-MS files, allowing remote code execution with the caller’s privileges. Affected components include ENCDEC.DLL use...
9.3CVSS7.5AI score0.2074EPSS
SaveExploits1References3Affected Software3
20