What’s Vulnerable › Vulnerabilities

CVE-2014-4060

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 23.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-08-12 · updated 2026-06-17
• Weakness: CWE-416

Description

Use-after-free vulnerability in MCPlayer.dll in Microsoft Windows Media Center TV Pack for Windows Vista, Windows 7 SP1, and Windows Media Center for Windows 8 and 8.1 allows remote attackers to execute arbitrary code via a crafted Office document that triggers deletion of a CSyncBasePlayer object, aka "CSyncBasePlayer Use After Free Vulnerability."

Affected products

• Microsoft Windows Media Center: all versions
• Microsoft Windows Media Center Tv Pack: all versions

References

• http://secunia.com/advisories/60671
• http://www.securityfocus.com/bid/69093
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-043
• http://secunia.com/advisories/60671
• http://www.securityfocus.com/bid/69093
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-043

Get alerted when CVE-2014-4060 or the next vulnerability affects your stack