Sploitus

CVE-2016-0015

2 known exploits for CVE-2016-0015

DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file, aka "DirectShow Heap Corruption Remote Code Execution Vulnerability."

Affected products
Directshow, Windows, Windows 10, Windows 7, Windows 8, Windows 8.1, Windows Server 2008, Windows Server 2012
Microsoft Windows 10
All versions
Microsoft Windows 7
All versions
Microsoft Windows 8
All versions
Microsoft Windows 8.1
All versions
Microsoft Windows Server 2008
All versions
Microsoft Windows Server 2012
All versions
Fix
Available
CVSS 2.0
9.3 HIGH
CVSS 3.1
7.8 HIGH
EPSS
34.6% (98th percentile)
Weakness
CWE-119
NVD status
Modified
Published
2016-01-13
CVE-2016-0015 at NVD
Authoritative description, scoring and affected products

2 known exploits for CVE-2016-0015

Proof-of-concept code and exploit modules indexed by Sploitus

Microsoft Windows - devenum.dll!DeviceMoniker::Load() Heap Corruption Buffer Underflow (MS16-007)
2016-01-13 Google Security ResearchEXPLOITDB
Microsoft Windows devenum.dll!DeviceMoniker::Load() - Heap Corruption Buffer Underflow (MS16-007)
2016-01-13 Google Security ResearchZDT