CVE-2016-0101: Input Validation

Published Mar 9, 2016

Updated

Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow remote attackers to execute arbitrary code via crafted media content, aka "Windows Media Parsing Remote Code Execution Vulnerability."

Affected Software

8 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=r2

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Event History

Mar 9, 2016

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0101?

CVE-2016-0101 has a critical severity rating, indicating that it can lead to remote code execution by attackers.

How do I fix CVE-2016-0101?

To fix CVE-2016-0101, apply the latest security updates from Microsoft that address this vulnerability.

What systems are affected by CVE-2016-0101?

CVE-2016-0101 affects Microsoft Windows 7 SP1, Windows 8.1, Windows 10 (Gold and 1511), Windows Server 2008 R2 SP1, Windows Server 2012, and Windows RT 8.1.

Can CVE-2016-0101 be exploited remotely?

Yes, CVE-2016-0101 can be exploited remotely through crafted media content.

What type of vulnerability is CVE-2016-0101?

CVE-2016-0101 is categorized as a remote code execution vulnerability related to Windows Media parsing.