PT-2025-4200 · Microsoft · Windows Direct Show+1

CVE-2025-21291 · Publicado 2025-01-14 · Atualizado 2025-02-21

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Direct Show versions are affected, but specific versions are not provided in the input data.

Description The issue is related to remote code execution in Windows Direct Show. It allows remote attackers to execute arbitrary code and affect the system. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations Since no specific affected versions are provided, a general recommendation cannot be accurately tailored to each version. However, typically, to resolve such issues, one would need to apply a patch or update provided by the software vendor for their specific version of Windows Direct Show. Each affected version would require a distinct and explicit fix, which is not detailed in the provided input data.

Correção

RCE

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

BDU:2025-02095

CVE-2025-21291

Produtos afetados

Windows

Windows Direct Show

Referências · 9

• https://twitter.com/CVEnew/status/1879490221483676142 · Publicação no Twitter
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21291 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21291 · Nota de Segurança
• https://twitter.com/windowsforum/status/1879247399018750262 · Publicação no Twitter
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-21291 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-21291 · Aviso do Fabricante
• https://safe-surf.ru/specialists/bulletins-nkcki/716883 · Nota de Segurança
• https://bdu.fstec.ru/vul/2025-02095 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2025-21291 · Nota de Segurança