PT-2020-2862 · Microsoft · Windows Media Foundation+2

Hossein Lotfi · Published 2020-06-09 · Updated 2021-07-21 · CVE-2020-1239

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Media Foundation (affected versions not specified) Windows Media Player (affected versions not specified)

Description The issue is related to errors in handling objects in memory within the Windows Media Foundation component of Windows operating systems. This can be exploited by a remote attacker using a specially crafted document or web page, potentially allowing them to install programs, view, modify, or delete data, or create new accounts with full user rights. The vulnerability enables remote attackers to execute arbitrary code and affect the system.

Recommendations For Windows Media Foundation, consider disabling the handling of specially crafted documents or web pages until a patch is available. For Windows Media Player, restrict access to potentially vulnerable media file processing functions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Integer Underflow

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-191

CWE-119

CWE-787

CWE-20

Related Identifiers

BDU:2020-03016

CVE-2020-1239

ZDI-20-697

Affected Products

Windows

Windows Media Foundation

Windows Media Player

References · 7

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-1239 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-697 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1239 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-03016 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1239 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1239 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1239 · Security Note