CVE-2016-0101
HighSummary
A vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via crafted media content. This affects several versions of the operating system, including Windows 7, 8.1, 10, and Windows Server.
Risk Assessment
Attackers can exploit this vulnerability to gain control over the system, potentially leading to data loss or compromise of the entire IT infrastructure of the organization.
Recommendation
It is recommended to update operating systems to the latest versions and apply the relevant security patches provided by Microsoft.
Other vulnerabilities in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511
See all- CVE-2016-0098High
A vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via crafted media content. This affects multiple versions of Windows, including Windows 7, 8.1, and 10.
- CVE-2015-0062High
A vulnerability in Microsoft Windows allows local users to gain elevated privileges by exploiting incorrect impersonation handling in a process that uses the SeAssignPrimaryTokenPrivilege privilege.
Original NVD description (English source)
Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow remote attackers to execute arbitrary code via crafted media content, aka "Windows Media Parsing Remote Code Execution Vulnerability."