KLA10596 Code execution vulnerability in Windows Media Player

An unspecified vulnerability was found in Windows Media Player. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DataObject.

Original advisories

Microsoft bulletin

CVE-2015-1728

Related products

Microsoft-Windows-Media-Player

CVE list

CVE-2015-1728 critical

KB list

3033890

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Microsoft Windows Media Player versions from 10, 11 and 12