CVE-2011-3401 in Microsoft Windows

Summary

ENCDEC.DLL in Windows Media Player and Media Center in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .dvr-ms file, aka "Windows Media Player DVR-MS Memory Corruption Vulnerability."

Reservation

09/09/2011

Disclosure

12/13/2011

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
4481	Microsoft Windows Media Player ENCDEC.DLL code injection	94	Not defined	Official fix	CVE-2011-3401
4448	Microsoft Windows Media DVR-MS code injection	94	Not defined	Official fix	CVE-2011-3401