CVEvulnerability

CVE-2020-1593

7.6 HIGH Published 2020-09-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-09-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

<p>A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit a malicious webpage.</p> <p>The security update addresses the vulnerability by correcting how Windows Media Audio Decoder handles objects.</p>

Affected configurations

• microsoft windows 10 • microsoft windows 10 1607 • microsoft windows 10 1709 • microsoft windows 10 1803 • microsoft windows 10 1809 • microsoft windows 10 1903 • microsoft windows 10 1909 • microsoft windows 10 2004 • microsoft windows 7 • microsoft windows 8.1 • microsoft windows rt 8.1 • microsoft windows server 2008 • microsoft windows server 2012 • microsoft windows server 2012 r2 • microsoft windows server 2016 • microsoft windows server 2016 1903 • microsoft windows server 2016 1909 • microsoft windows server 2016 2004 • microsoft windows server 2019

References