Windows Media vulnerability could allow remote code execution
Report ID: MS201112006
Date Published: 14 December 2011
Compromise Type: remote-code-execution
Compromise From: remote
A vulnerability in Windows Media Player and Windows Media Center could lead to arbitrary code execution upon successful exploit using a specially crafted .dvr-ms file.
Microsoft has issued a security update for Windows Media Player and Windows Media Center to address a vulnerability caused by improper parsing of .dvr-ms files. The update introduces modification on the way that Windows Media Player and Windows Media Center open specially crafted .dvr-ms files. Users are recommended to install this update as a protection against potential exploit.
Install the latest security patch for applicable system, available for download from (https://technet.microsoft.com/en-us/security/bulletin/ms11-092)