Microsoft Windows Media Center Multiple Vulnerabilities

Last Update Date: 9 Dec 2015 14:00 Release Date: 9 Dec 2015 3699 Views

RISK: Medium Risk

TYPE: Clients - Audio & Video

Media Center Library Parsing RCE Vulnerability
A vulnerability exists in Windows Media Center that could allow remote code execution if Windows Media Center opens a specially crafted Media Center link (.mcl) file that references malicious code. An attacker who successfully exploited this vulnerability could take control of an affected system. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Workstations are primarily at risk of this vulnerability.
Windows Media Center Information Disclosure Vulnerability
A vulnerability exists in Windows Media Center that could allow information disclosure if Windows Media Center improperly handles a specially crafted Media Center link (.mcl) file that references malicious code. An attacker who successfully exploited the vulnerability could disclose local file system information. Workstations are primarily at risk of this vulnerability.