CVE-2020-1574

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

Medium · published August 17, 2020

CVSS v3.1
5.5
EPSS
3%
Percentile
85.3
In the wild
Unconfirmed
What it is

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code.

Exploitation of the vulnerability requires that a program process a specially crafted image file.

The update addresses the vulnerability by correcting how Microsoft Windows Codecs Library handles objects in memory.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.02614 · 85.3th percentile
Published
2020-08-17T19:13Z
EPSS history
Timeline
  • 17 AUG 19:13Z
    Microsoft Windows Codecs Library Remote Code Execution Vulnerability
    cvelistv5