|CVE-2019-1430||Microsoft Windows Media Foundation Remote Code Execution Vulnerability||Windows 10||Critical||12-11-2019|
Brief overview of the risk:
A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.
An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Detailed Information on the risk:
To exploit the vulnerability, an attacker must send a specially crafted QuickTime file to a user and convince them to open it. When opened, the malicious QuickTime file will execute code of the attacker’s choice on the target system.The security update addresses the vulnerability by ensuring Windows Media Foundation properly parses QuickTime media files.
Further information on this vulnerability is available at : CVE-2019-1430
Affected SoftwareWindows 10 Version 1903 for 32-bit Systems
Windows 10 Version 1903 for x64-based Systems
Windows 10 Version 1903 for ARM64-based Systems
Windows Server version 1903 (Server Core installation)