Unscored severity · published Aug 12, 2014
CVE-2014-4060
Use-after-free vulnerability in MCPlayer.dll in Microsoft Windows Media Center TV Pack for Windows Vista, Windows 7 SP1, and Windows Media Center for Windows 8 and 8.1 allows…
–
CVSS
23.5%
EPSS
No
On KEV
Description
Use-after-free vulnerability in MCPlayer.dll in Microsoft Windows Media Center TV Pack for Windows Vista, Windows 7 SP1, and Windows Media Center for Windows 8 and 8.1 allows remote attackers to execute arbitrary code via a crafted Office document that triggers deletion of a CSyncBasePlayer object, aka "CSyncBasePlayer Use After Free Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)23.5% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WM
Windows Media Center · Microsoft
All versions, or not specified · source: NVD
WM
Windows Media Center TV Pack · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-4060
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-4060
Third Party Advisory
http://secunia.com/advisories/60671
Third Party Advisory
http://www.securityfocus.com/bid/69093
Patch
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-043