PT-2020-4324 · Microsoft · Windows Media Foundation+2

Hossein Lotfi · Published 2020-09-18 · Updated 2023-12-31 · CVE-2020-16915

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Windows Media Foundation versions (affected versions not specified) Windows Media Player versions (affected versions not specified)

Description: The issue is related to errors in handling objects in memory within the Windows Media Foundation component, which can lead to memory corruption. This can be exploited by an attacker to gain access to modify data, install programs, view, change, or delete data, or create new accounts with full user rights. An attacker could exploit the vulnerability by convincing a user to open a specially crafted document or visit a malicious webpage. The vulnerability is also associated with a buffer overflow in the HEVC component of Windows Media Player, allowing remote attackers to execute arbitrary code using a specially crafted file or malicious webpage.

Recommendations: For Windows Media Foundation, apply the security update that corrects how Windows Media Foundation handles objects in memory. For Windows Media Player, avoid using the HEVC stream parsing function until a patch is available. As a temporary workaround, consider restricting access to specially crafted documents and malicious webpages to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

BDU:2020-04821

BDU:2020-05455

CVE-2020-16915

ZDI-20-1257

Affected Products

Windows

Windows Media Foundation

Windows Media Player

References · 9

• https://osv.dev/vulnerability/CVE-2020-16915 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05455 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-16915 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04821 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16915 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16915 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-16915 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-16915 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-1257 · Security Note