Microsoft release out-of-band update for Windows Codecs library and Visual Studio Code to fix serious vulnerabilities – MSPoweruser

Microsoft has launched two out-of-band fixes for Home windows Codecs library and Visible Studio Code to deal with Distant Code Execution vulnerabilities in each platforms.

The Home windows bug concerned the HEVC Home windows Codecs library and impacts all variations of Home windows.

Detailed in CVE-2020-17022, Microsoft says attackers can craft malicious photographs that, when processed by an app operating on high of Home windows, can enable the attacker to execute code on an unpatched Home windows OS.

Solely those that put in the non-compulsory HEVC or “HEVC from System Producer” media codecs from Microsoft Retailer are affected and Microsoft is distributing the patch instantly through the Microsoft Retailer.

To see when you have a weak model put in, go to Settings, Apps & Options, and choose HEVC, Superior Choices. Variations sooner than 1.0.32762.0, 1.0.32763.0 are insecure.

The opposite vulnerability impacts Visible Studio Code.

Tracked below CVE-2020-17023, Microsoft says attackers can craft malicious package deal.json recordsdata that, when loaded in Visible Studio Code, can execute malicious code. If customers are operating as directors the code might be executed with these privileges.

An up to date model of Visible Studio Code is obtainable and Microsoft recommends updating as quickly as attainable.

through ZDNet