RULE(RULE ID:312669)

Rule General Information
Release Date: 2016-03-04
Rule Name: WEB-ACTIVEX Microsoft Windows Remote Code Execution Vulnerability (CVE-2016-0098)
Severity:
CVE ID:
Rule Protection Details
Description: Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 allow remote attackers to execute arbitrary code via crafted media content.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows
Reference: MicrosoftSecurityBulletin:MS16-027
SecurityFocusBID:84089
SecurityTrackerID:1035200
Solutions
Microsoft has released a patch MS16-027 to eliminate the vulnerability. The patch can be downloaded at http://technet.microsoft.com/security/bulletin/MS16-027