1. Home
  2. CVE Database
  3. CVE-2014-0301
HIGH · 9.3

CVE-2014-0301

Double free vulnerability in qedit.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Wind...

Vulnerability Description

Double free vulnerability in qedit.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via a crafted JPEG image, aka "DirectShow Memory Corruption Vulnerability."

CVSS Score

9.3

HIGH

AV:N/AC:M/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
MicrosoftWindows 7-
MicrosoftWindows 8-
MicrosoftWindows 8.1-
MicrosoftWindows Server 2003-
MicrosoftWindows Server 2008-
MicrosoftWindows Server 2012-
MicrosoftWindows Vista-
MicrosoftWindows Xp-

Related Weaknesses (CWE)

CWE-415

References

FAQ

What is CVE-2014-0301?

CVE-2014-0301 is a vulnerability with a CVSS score of 9.3 (HIGH). Double free vulnerability in qedit.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Wind...

How severe is CVE-2014-0301?

CVE-2014-0301 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-0301?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows 7, Microsoft Windows 8, Microsoft Windows 8.1, Microsoft Windows Server 2003, Microsoft Windows Server 2008.