CVE-2016-0185highunder attack

CVE-2016-0185

Published · Updated

Follow this CVE+ Monitor Windows

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

83Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 7.8epss 70%
from disclosure to weapon1 day
Published on NVDMay 11
1st PoC+1d
CISA KEV+2002d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

Windows Media Center can be tricked into running malicious code when you open a specially crafted link file (.mcl). An attacker can exploit this to take control of your computer remotely.

Technical detail

A remote code execution vulnerability exists in Windows Media Center (Vista SP2, 7 SP1, 8.1) where processing a maliciously crafted .mcl file allows arbitrary code execution with user privileges. Attack vector is via user interaction with a malicious Media Center link file; requires the victim to open the crafted file.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka "Windows Media Center Remote Code Execution Vulnerability."
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.