Out-of-bounds read in Microsoft Windows and Windows Server - CVE-2020-1232

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary condition within Microsoft Windows Media Player when parsing DTS streams. A remote attacker can trick the victim into connection to a malicious streaming server, trigger an out-of-bounds read error and read contents of memory on the system.

Affected software

How to mitigate CVE-2020-1232

External References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1232
• https://www.zerodayinitiative.com/advisories/ZDI-20-693/

Related Security Bulletins

• Multiple vulnerabilities in Microsoft Media Foundation