EIP-2026-117571
PRE-CVEMicrosoft Windows Media Center WMV / WMA 6.3.9600.16384 - Code Execution
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-117571. PoCs published by Eduardo Braun Prado.
AI-analyzed exploit summary This exploit leverages a security bypass in Microsoft Windows Media Center (WMV/WMA file parsing) to achieve arbitrary code execution by embedding a 'URL' script instruction in a crafted file. It exploits the lack of 'Local Machine Zone Lockdown' in the ehexthost32 plugin, allowing navigation to local files and execution in a privileged context.
Description
Microsoft Windows Media Center WMV / WMA 6.3.9600.16384 - Code Execution
Exploits (1)
This exploit leverages a security bypass in Microsoft Windows Media Center (WMV/WMA file parsing) to achieve arbitrary code execution by embedding a 'URL' script instruction in a crafted file. It exploits the lack of 'Local Machine Zone Lockdown' in the ehexthost32 plugin, allowing navigation to local files and execution in a privileged context.