Description
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.
There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit a malicious webpage.
The security update addresses the vulnerability by correcting how Windows Media Foundation handles objects in memory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Windows 10 Version 1607 | 10.0.14393.0 – < publication | publication |
| Microsoft | Windows 10 Version 1709 | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1709 for 32-bit Systems | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1803 | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1809 | 10.0.17763.0 – < publication, 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1909 | 10.0.0 – < publication | publication |
| Microsoft | Windows Server 2016 | 10.0.14393.0 – < publication | publication |
| Microsoft | Windows Server 2016 (Server Core installation) | 10.0.14393.0 – < publication | publication |
| Microsoft | Windows Server 2019 | 10.0.17763.0 – < publication | publication |
| Microsoft | Windows Server 2019 (Server Core installation) | 10.0.17763.0 – < publication | publication |
| Microsoft | Windows Server, version 1803 (Server Core Installation) | 10.0.0 – < publication | publication |
| Microsoft | Windows Server, version 1903 (Server Core installation) | 10.0.0 – < publication | publication |
| Microsoft | Windows Server, version 1909 (Server Core installation) | 10.0.0 – < publication | publication |
References
- Media Foundation Memory Corruption Vulnerability vendor-advisory patch