CVE-2019-1430 - A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code Execution Vulnerability'

Back Back to CVE browser

HIGH

A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code Execution Vulnerability'

Published Nov 12, 2019

7.8

HIGH

CVSS 3.1

EPSS 13.84%

Description

A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code Execution Vulnerability'.

Affected products

Vendor Microsoft Product Windows 10 Version 1903 for 32-bit Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1903 for ARM64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1903 for x64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows Server, version 1903 (Server Core installation) Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows 10 Version 1903 for 32-bit Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 1903 for ARM64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 1903 for x64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows Server, version 1903 (Server Core installation)

n/a

Version	Status	Constraints
unspecified	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9987
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1430
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9987		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1430		x_refsource_MISCPatchVendor Advisory