CVE-2014-2780

 

Published at: - 09-07-2014 12:55

Last modified: - 12-01-2023 08:34

Total changes: - 4

Description

DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows local users to gain privileges by leveraging control over a low-integrity process to execute a crafted application, aka "DirectShow Elevation of Privilege Vulnerability."

Common Vulnerability Scoring System (CVSS)

AV:L/AC:M/Au:N/C:C/I:C/A:C

 

Verification logic

 

Reference

• 68392-Third Party Advisory, VDB Entry
• 20140716 VUPEN Security Research - Microsoft Windows "DirectShow" Privilege Escalation Vulnerability (Pwn2Own 2014)-Third Party Advisory, VDB Entry
• MS14-041-Patch, Vendor Advisory

 

Keywords

NVD

 

CVE-2014-2780

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures