CVE-2016-0185

Опубликовано: 11 мая 2016

Источник: nvd

CVSS3: 7.8

CVSS2: 9.3

EPSS Высокий

Описание

Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka "Windows Media Center Remote Code Execution Vulnerability."

Ссылки

http://www.securityfocus.com/bid/90023
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1035832
Broken Link
Third Party Advisory
VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-16-277
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-059
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/39805/
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/90023
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1035832
Broken Link
Third Party Advisory
VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-16-277
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-059
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/39805/
Third Party Advisory
VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0185

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.82752

Высокий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2016-0185

msrc

почти 10 лет назад

Windows Media Center Remote Code Execution Vulnerability

GHSA-76r4-g8fm-62pc