CVE-2016-7217: Buffer Overflow

Published Nov 10, 2016

Updated

Media Foundation in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Media Foundation Memory Corruption Vulnerability."

Affected Software

8 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Event History

Nov 10, 2016

CVE Published

via MITRE·06:16 AM

Data Sourced

via MITRE·06:16 AM

Description

Frequently Asked Questions

Which systems are affected?

Systems running the listed Windows releases are exposed: Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, Windows Server 2012 Gold and R2, and Windows Server 2016.

What does an attacker need to exploit this vulnerability?

An unauthenticated remote attacker needs to convince a user to visit a crafted website. The CVSS vector indicates network reachability, low attack complexity, and required user interaction.

What is the impact of successful exploitation?

Successful exploitation can allow arbitrary code execution with high impact to confidentiality, integrity, and availability.