CVE-2011-0032

CVE-2011-0032 is an Untrusted search path vulnerability in DirectShow loading DLLs from the current working directory, allowing local privilege escalation. Affected: Windows Vista SP1/SP2, Windows 7 (Gold/SP1), Windows Server 2008 R2/R2 SP1, and Windows Media Center TV Pack for Vista. Root cause:...

CVE-2011-2009

CVE-2011-2009 describes an Untrusted search path vulnerability in Windows Media Center that allows local users to gain privileges via a Trojan horse DLL loaded from the current working directory. Affected products: Windows Vista SP2, Windows 7 (Gold and SP1), and Windows Media Center TV Pack for ...

CVE-2011-0042

The CVE-2011-0042 issue affects Windows Media Player/Windows Media Center where SBE.dll in the Stream Buffer Engine mis-parses DVR-MS files. This parsing flaw can enable remote code execution via a crafted DVR-MS file on multiple Windows versions (XP SP2/SP3, XP MCE 2005 SP3, Vista SP1/SP2, Windo...