Home / bulletins

MS11-015 - Critical: Vulnerabilities in Windows Media Could Allow Remote Code Execution (2510030) - Version:1.1

Posted on 09 March 2011

There is an newer version: MS11-015 - Version: 1.2

Critical

Severity Rating: Critical - Revision Note: V1.1 (March 9, 2011): Corrected the Systems Management Server table entries for SMS 2.0 and SMS 2003 with SUIT for Windows XP Service Pack 3. These are informational changes only. There were no changes to the security update files or detection logic.Summary: This security update resolves one publicly disclosed vulnerability in DirectShow and one privately reported vulnerability in Windows Media Player and Windows Media Center. The more severe of these vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Digital Video Recording (.dvr-ms) file. In all cases, a user cannot be forced to open the file; for an attack to be successful, a user must be convinced to do so.

Link

Other versions

 

TOP