This host is missing a critical security update according to Microsoft Bulletin MS11-015.

Successful exploitation could allow attackers to execute arbitrary code in the context of the user running the application. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/bulletin/ms11-015.mspx

The flaws are caused by, - An error in the way DirectShow loads external libraries, which could allow attackers to load a malicious DLL by tricking a user into opening a file from a malicious location. - A memory corruption error in Windows Media Player and Windows Media Center when parsing '.dvr-ms' media files, which could allow attackers to execute arbitrary code by tricking a user into opening a malicious '.dvr-ms' file.

Microsoft Windows XP Service Pack 3 and prior. Microsoft Windows Vista Service Pack 2 and prior. Micorsoft Windows 7 Service Pack 1 and prior. Microsoft Windows XP Media Center Edition 2005 Service Pack 3.

• http://support.microsoft.com/kb/2479943
• http://www.microsoft.com/technet/security/bulletin/ms11-015.mspx
• http://www.vupen.com/english/advisories/2011/0615

---

Updated on 2015-03-25