CVE-2015-2509

CVE Database · CVE-2015-2509

CVE-2015-2509

· N/AModified

CVSS v3.1

N/A

EPSS

71.04%

Published

Sep 8, 2015

Modified

May 6, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBMicrosoft Windows Media Center - Command Execution (MS15-100)Exploit-DBMicrosoft Windows Media Center - MCL (MS15-100) (Metasploit)TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Media Center link (mcl) file, aka "Windows Media Center RCE Vulnerability."

Weaknesses (CWE)

CWE-284

Affected Products (4)

microsoft · windows_7vulnerable

microsoft · windows_8vulnerable

microsoft · windows_8.1vulnerable

microsoft · windows_vistavulnerable

References (12)

http://www.rapid7.com/db/modules/exploit/windows/fileformat/ms15_100_mcl_exe

Third Party Advisory

http://www.securityfocus.com/bid/76594

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033499

Third Party AdvisoryVDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-100

PatchVendor Advisory

https://www.exploit-db.com/exploits/38151/

Third Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/38195/

KEV Catalog EPSS Scores Vendors All CVEs