CVE-2011-3401: Code Injection
ENCDEC.DLL in Windows Media Player and Media Center in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .dvr-ms file, aka "Windows Media Player DVR-MS Memory Corruption Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3401?
CVE-2011-3401 is considered to have a critical severity due to its potential to allow remote code execution.
How do I fix CVE-2011-3401?
To fix CVE-2011-3401, apply the security updates provided by Microsoft, specifically those referenced in their security bulletins.
Which versions of Windows are affected by CVE-2011-3401?
CVE-2011-3401 affects Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1.
What type of attack does CVE-2011-3401 exploit?
CVE-2011-3401 exploits a memory corruption vulnerability through crafted .dvr-ms files.
Can CVE-2011-3401 be exploited without user interaction?
Yes, CVE-2011-3401 can potentially be exploited remotely without requiring user interaction, making it particularly dangerous.