Home / bulletins

MS15-020 - Critical: Vulnerabilities in Microsoft Windows Could Allow Remote Code Execution (3041836) - Version: 1.1

Posted on 11 March 2015

Critical

Severity Rating: Critical
Revision Note: V1.1 (March 10, 2015): Bulletin revised to better explain the attack vector for the DLL Planting Remote Code Execution Vulnerability (CVE-2015-0096).
Summary: This security update resolves two privately reported vulnerabilities in Microsoft Windows. The vulnerabilities could allow remote code execution if an attacker successfully convinces a user to browse to a specially crafted website, open a specially crafted file, or open a file in a working directory that contains a specially crafted DLL file.

Link

Other versions

• MS15-020 - Version: 1.0
• MS15-020 - Version: 1.1

 

TOP