7.8
CVSSv3

CVE-2016-0015

Published: 13/01/2016 Updated: 17/05/2019
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 935
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote malicious users to execute arbitrary code via a crafted file, aka "DirectShow Heap Corruption Remote Code Execution Vulnerability."

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows server 2008 r2

microsoft windows server 2012 r2

microsoft windows 10 1511

microsoft windows 8.1 -

microsoft windows server 2008 -

microsoft windows 7 -

microsoft windows vista -

microsoft windows 8 -

microsoft windows server 2012 -

microsoft windows 10 -

Exploits

Source: codegooglecom/p/google-security-research/issues/detail?id=594 Heap corruption buffer underflow in devenumdll!DeviceMoniker::Load() There exists a buffer underflow vulnerability in devenumdll!DeviceMoniker::Load when attempting to null terminate a user supplied string The function as it exists on Windows 7 x86 is implemented a ...