VULNERABILITY INTELLIGENCE

CVE-2011-3401

CVSS score9.3 HIGH
EPSS probability20.74%
CISA KEVNot currently listed
Published2011-12-14
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

ENCDEC.DLL in Windows Media Player and Media Center in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .dvr-ms file, aka "Windows Media Player DVR-MS Memory Corruption Vulnerability."

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references