CVE-2019-1430

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code Execution Vulnerability'.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Nov 12, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-143009.8Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a denial of service or c CVE-2019-143017.5Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2).CVE-2019-143026.8On Ricoh SP C250DN 1.06 devices, a debug port can be used.CVE-2019-143037.5Ricoh SP C250DN 1.05 devices allow denial of service (issue 1 of 3). Some Ricoh printers were affected by a wrong LPD service implementation CVE-2019-143048.8Ricoh SP C250DN 1.06 devices allow CSRF.CVE-2019-143059.8Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, SMTP, and notification alerts, CVE-2019-143067.5Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).CVE-2019-143079.8Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of CVE-2019-143089.8Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code exec CVE-2019-143097.5Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This woul CVE-2019-143109.8Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3). Unauthenticated crafted packets to the IPP service will cause a vulnera CVE-2019-143126.5Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source code viewer. This vulnerability allows