Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Windows Media Center Tv Pack
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-4060 1 Microsoft 6 Windows 7, Windows 8, Windows 8.1 and 3 more 2023-12-10 6.8 MEDIUM N/A
Use-after-free vulnerability in MCPlayer.dll in Microsoft Windows Media Center TV Pack for Windows Vista, Windows 7 SP1, and Windows Media Center for Windows 8 and 8.1 allows remote attackers to execute arbitrary code via a crafted Office document that triggers deletion of a CSyncBasePlayer object, aka "CSyncBasePlayer Use After Free Vulnerability."
CVE-2011-0032 1 Microsoft 4 Windows 7, Windows Media Center Tv Pack, Windows Server 2008 and 1 more 2023-12-10 9.3 HIGH N/A
Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Digital Video Recording (.dvr-ms), Windows Recorded TV Show (.wtv), or .mpg file, aka "DirectShow Insecure Library Loading Vulnerability."
CVE-2011-2009 1 Microsoft 3 Windows 7, Windows Media Center Tv Pack, Windows Vista 2023-12-10 9.3 HIGH N/A
Untrusted search path vulnerability in Windows Media Center in Microsoft Windows Vista SP2 and Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista, allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Media Center Insecure Library Loading Vulnerability."
CVE-2011-0042 1 Microsoft 5 Windows 7, Windows Media Center Tv Pack, Windows Vista and 2 more 2023-12-10 9.3 HIGH N/A
SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital Video Recording (.dvr-ms) files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DVR-MS Vulnerability."