Remote Code Execution Vulnerability in Windows Media Format Runtime by Microsoft

CVE-2013-3127

Summary

This vulnerability occurs in the Microsoft WMV video codec components, specifically in wmv9vcm.dll, wmvdmod.dll, and wmvdecod.dll, enabling remote attackers to execute arbitrary code on the system. By crafting a specially designed media file, an attacker can exploit this flaw when the file is processed by affected versions of Windows Media Format Runtime and Windows Media Player, potentially gaining control over the affected system. Users are advised to update their software to mitigate this risk.

References