The vulnerability of the Windows operating system’s Media Audio Codec component, allowing a hacker to execute arbitrary code.

The vulnerability of the Windows Media Audio Codec component is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Security Bulletin: A vulnerability have been identified in Apache Commons Codec shipped with IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library

Summary Apache Commons Codec is a dependency component shipped with the IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library for Message Bus Integration. Information about the security vulnerability affecting Apache Commons Codec has been published. Vulnerability Details Third...

CVE-2020-1339

A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a...

Remote code execution

A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a...

CVE-2020-1339

CVE-2020-1339 is a remote code execution flaw described for Windows Media codecs. The Initial document states that it occurs when Windows Media Audio Codec improperly handles objects, enabling an attacker to take control of an affected system. Exploitation vectors include convincing a user to ope...

Security Bulletin: Financial Transaction Manager for ACH Services is affected by a potential information disclosure id 177835

Summary Financial Transaction Manager for ACH Services FTM ACH for Multi-Platform has addressed the following vulnerability. A potential vulnerability in the Apache Commons Codec module could allow information disclosure. Vulnerability Details Third Party Entry: 177835 DESCRIPTION: Apache Commons...

Microsoft Reveals New Innocent Ways Windows Users Can Get Hacked

Microsoft earlier today released its August 2020 batch of software security updates for all supported versions of its Windows operating systems and other products. This month's Patch Tuesday updates address a total of 120 newly discovered software vulnerabilities, of which 17 are critical, and th...

MMS Exploit Part 5: Defeating Android ASLR, Getting RCE

Posted by Mateusz Jurczyk, Project Zero This post is the fifth and final of a multi-part series capturing my journey from discovering a vulnerable little-known Samsung image codec, to completing a remote zero-click MMS attack that worked on the latest Samsung flagship devices. Previous posts are...

PT-2020-3675 · Microsoft · Windows Media Audio Decoder +1

Name of the Vulnerable Software and Affected Versions: Windows Media Audio Codec affected versions not specified Description: A remote code execution issue exists due to improper handling of objects by Windows Media Audio Codec, allowing an attacker to potentially take control of an affected...

KB4566782: Windows 10 Version 2004 August 2020 Security Update

The remote Windows host is missing security update 4566782. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...

KB4571723: Windows 8.1 and Windows Server 2012 R2 August 2020 Security Update

The remote Windows host is missing security update 4571723 or cumulative update 4571703. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who successfully exploited the...

KB4571709: Windows 10 Version 1803 August 2020 Security Update

The remote Windows host is missing security update 4571709. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...

KB4571741: Windows 10 Version 1709 August 2020 Security Update

The remote Windows host is missing security update 4571741. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...

KB4571694: Windows 10 Version 1607 and Windows Server 2016 August 2020 Security Update

The remote Windows host is missing security update 4571694. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...

KB4571719: Windows 7 and Windows Server 2008 R2 August 2020 Security Update

The remote Windows host is missing security update 4571719 or cumulative update 4571729. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who successfully exploited the...

KB4571746: Windows Server 2008 August 2020 Security Update

The remote Windows host is missing security update 4571746 or cumulative update 4571730. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who successfully exploited the...

KB4565349: Windows 10 Version 1809 and Windows Server 2019 August 2020 Security Update

The remote Windows host is missing security update 4565349. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...

Security Bulletin: Financial Transaction Manager for Check Services is affected by a potential information disclosure id 177835

Summary Financial Transaction Manager for Check Services FTM CHK for Multi-Platform has addressed the following vulnerability. A potential vulnerability in the Apache Commons Codec module could allow information disclosure. Vulnerability Details Third Party Entry: 177835 DESCRIPTION: Apache Commo...

Security Bulletin: Financial Transaction Manager for Corporate Payment Services is affected by a potential information disclosure id 177835

Summary Financial Transaction Manager for Corporate Payment Services FTM CPS for Multi-Platform has addressed the following vulnerability. A potential vulnerability in the Apache Commons Codec module could allow information disclosure. Vulnerability Details Third Party Entry: 177835 DESCRIPTION:...

GHSA-86QR-9VQC-PGC6 Code execution in Spring Integration

Spring Integration framework provides Kryo Codec implementations as an alternative for Java deserialization. When Kryo is configured with default options, all unregistered classes are resolved on demand. This leads to the "deserialization gadgets" exploit when provided data contains malicious cod...