CVE-2015-2509
60Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 71%
from disclosure to weapon2 days
Published on NVDSep 9
1st PoC+2d
metasploitSep 8
exploitation probability
71%top 1% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Media Center link (mcl) file, aka "Windows Media Center RCE Vulnerability."
Affected products
n/a · n/apublic PoCs found — 4✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/38195exploitdbwww.exploit-db.com/exploits/38151unverifiedcve_referencewww.exploit-db.com/exploits/38151/unverifiedcve_referencewww.exploit-db.com/exploits/38195/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-100https://www.exploit-db.com/exploits/38151/https://www.exploit-db.com/exploits/38195/http://www.rapid7.com/db/modules/exploit/windows/fileformat/ms15_100_mcl_exehttp://www.securityfocus.com/bid/76594http://www.securitytracker.com/id/1033499