7.8Alta

CVE-2020-17022Microsoft Windows Codecs Library Remote Code Execution Vulnerability

Microsoft Windows 10 Version 1803; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 1909; Microsoft Windows 10 Version 1709 for 32-bit Systems Publicada: (hace 6 años)

Descripción

<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code.</p> <p>Exploitation of the vulnerability requires that a program process a specially crafted image file.</p> <p>The update addresses the vulnerability by correcting how Microsoft Windows Codecs Library handles objects in memory.</p>

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches