(MS13-011) Vulnerability in Media Decompression Could Allow Remote Code Execution (2780091)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: CRITICAL

  CVE Identifier: CVE-2013-0077

  Advisory Date: FEB 13, 2013

---

  DESCRIPTION

This patch addresses a vulnerability found in Microsoft Windows. Once an affected user opens a specially crated media file and a Microsoft Office document with a specially crafted embedded media file, it could lead to remote code execution thus compromising the security of the system.

  SOLUTION

  PATCH: http://technet.microsoft.com/en-us/security/bulletin/ms13-011

  AFFECTED SOFTWARE AND VERSION

• Windows XP Service Pack 3
• Windows XP Professional x64 Edition Service Pack 2
• Windows Server 2003 Service Pack 2
• Windows Server 2003 x64 Edition Service Pack 2
• Windows Server 2003 with SP2 for Itanium-based Systems
• Windows Vista Service Pack 2
• Windows Vista x64 Edition Service Pack 2
• Windows Server 2008 for 32-bit Systems Service Pack 2
• Windows Server 2008 for x64-based Systems Service Pack 2
• Windows Server 2008 for Itanium-based Systems Service Pack 2

Related Vulnerability

• February 2013 - Microsoft Releases 12 Security Advisories