Main Vulnerability Database Vulnerabilities #VU1165

Memory Corruption in Windows - CVE-2016-7248

Published: November 9, 2016 / Updated: February 3, 2017

Vulnerability identifier: #VU1165

CSH Severity: High

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2016-7248

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: Microsoft

Affected software:
Windows

Detailed vulnerability description

A remote attacker can execute arbitrary code on the target system.

The vulnerability exists due to incorrect handling of objects in memory in Microsoft Video Control. A remote attacker can create a specially crafted file, trick the victim to open it and cause memory corruption.

Successful exploitation of the vulnerability may allow an attacker to execute arbitrary code on vulnerable system with privileges of the current user.