CVE-2019-1430
Last modified
CVE-2019-1430 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code Execution Vulnerability'.. EPSS estimates a 12.96% chance of exploitation in the next 30 days.
Description
A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code Execution Vulnerability'.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 10 | 1903 |
| Microsoft | Windows Server 2016 | 1903 |
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1430Patch, Vendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1430Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-1430?
How severe is CVE-2019-1430?
How do I fix CVE-2019-1430?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-14294An issue was discovered in Xpdf 4.01.01. There is a use-afte…
- CVE-2019-14295An Integer overflow in the getElfSections function in p_vmli…
- CVE-2019-14296canUnpack in p_vmlinx.cpp in UPX 3.95 allows remote attacker…
- CVE-2019-14297Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Wi…
- CVE-2019-14298Veeam ONE Reporter 9.5.0.3201 allows XSS via a crafted Descr…
- CVE-2019-14299Ricoh SP C250DN 1.05 devices have an Authentication Method V…9.8
- CVE-2019-14300Several Ricoh printers have multiple buffer overflows parsin…9.8
- CVE-2019-14301Ricoh SP C250DN 1.06 devices have Incorrect Access Control (…7.5
- CVE-2019-14302On Ricoh SP C250DN 1.06 devices, a debug port can be used.6.8
- CVE-2019-14303Ricoh SP C250DN 1.05 devices allow denial of service (issue …7.5
- CVE-2019-14304Ricoh SP C250DN 1.06 devices allow CSRF.8.8
- CVE-2019-14305Several Ricoh printers have multiple buffer overflows parsin…8.8
Are you affected by CVE-2019-1430?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST