ZDI-23-165: Microsoft Windows Media Player Color Conversion Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows Media Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

arbitrary code attackers code code execution conversion exploit file integer malicious media media player microsoft microsoft windows page player remote code remote code execution target vulnerability windows zdi