{ "schema_version": "1.4.0", "id": "GHSA-cvw5-r6p2-vxj5", "modified": "2025-04-12T12:51:41Z", "published": "2022-05-14T01:01:44Z", "aliases": [ "CVE-2015-2509" ], "details": "Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Media Center link (mcl) file, aka \"Windows Media Center RCE Vulnerability.\"", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-2509" }, { "type": "WEB", "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-100" }, { "type": "WEB", "url": "https://www.exploit-db.com/exploits/38151" }, { "type": "WEB", "url": "https://www.exploit-db.com/exploits/38195" }, { "type": "WEB", "url": "http://www.rapid7.com/db/modules/exploit/windows/fileformat/ms15_100_mcl_exe" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/76594" }, { "type": "WEB", "url": "http://www.securitytracker.com/id/1033499" } ], "database_specific": { "cwe_ids": [ "CWE-284" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2015-09-09T00:59:00Z" } }