CVE-2020-17109: Undefined Security Weakness

HEVC Video Extensions Remote Code Execution Vulnerability...

HEVC Video Extensions Remote Code Execution Vulnerability

...

PT-2020-4819 · Microsoft · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is related to incorrect code generation management in the HEVC Video Extension codec. Exploitation of this issue may allow a remote attacker to execute arbitrary cod...

PT-2020-4660 · Microsoft · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is related to errors in code generation management. It may allow a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information...

PT-2020-4821 · Microsoft · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is related to incorrect code generation management in the HEVC Video Extension codec. Exploitation of this issue may allow a remote attacker to execute arbitrary cod...

KLA12004 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service, spoof user interface. Below is a complete list of...

Microsoft Windows Codecs Library RCE (October 2020)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability : - A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who...

Microsoft Windows Codecs Library Multiple Vulnerabilities (June 2020)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by two code execution vulnerabilities. An authenticated, local attacker can exploit either of these vulnerabilities to bypass additional authentication and execute arbitrary command...