New Search

Media Foundation Memory Corruption Vulnerability - CVE-2020-1379

oval:org.cisecurity:def:8174

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view change or delete data; or create new accounts with full user rights. There are multiple ways an attacker could exploit the vulnerability such as by convincing a user to open a specially crafted document or by convincing a user to visit a malicious webpage. The security update addresses the vulnerability by correcting how Windows Media Foundation handles objects in memory.

Family:
windows
Status:
ACCEPTED
Platform(s):
  • Microsoft Windows Server 2008 R2
  • Microsoft Windows Server 2012
  • Microsoft Windows Server 2008
  • Microsoft Windows 7
  • Microsoft Windows Server 2012 R2
  • Microsoft Windows 8.1
  • Microsoft Windows Server 2016
  • Microsoft Windows 10
  • Microsoft Windows Server 2019
Class:
vulnerability
Reference(s):
  • CVE-2020-1379
  • MSRC-CVE-2020-1379
  • KB4571719
  • KB4571746
  • KB4571702
  • KB4571723
  • KB4571692
  • KB4571694
  • KB4571741
  • KB4571709
  • KB4565349
  • KB4565351
Product(s):