News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • Another HEVC codec bug fixed via the Microsoft Store – plus a couple of updates on this month’s mayhem

    Home Forums AskWoody blog Another HEVC codec bug fixed via the Microsoft Store – plus a couple of updates on this month’s mayhem

    Viewing 3 reply threads
    • Author
      Posts
      • #2304640 Reply
        woody
        Da Boss

        Back in July I wrote about two weird Microsoft Store patches for a couple of security holes in the HEVC codecs, which are programs that Microsoft crea
        [See the full post at: Another HEVC codec bug fixed via the Microsoft Store – plus a couple of updates on this month’s mayhem]

        1 user thanked author for this post.
      • #2304646 Reply
        Alex5723
        AskWoody Plus

        Microsoft updates :

        * CVE-2020-16898

        – CVE-2020-16898 | Windows TCP/IP Remote Code Execution Vulnerability
        https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-16898

        – Version: 1.1
        – Reason for Revision: The following changes have been made to further clarify the
        information for this vulnerability: 1) Added FAQ and Mitigation sections 2) Added
        Impact of Workaround to the Workaround section 3) Corrected the CVSS score to 8.8
        4) Corrected the Exploitability Index from “1 – Exploitation More Likely” to
        “2 – Exploitation Less Likely”.
        These are informational changes only.
        – Originally October 13, 2020
        – Updated: October 15, 2020
        – Aggregate CVE Severity Rating: Critical

        • This reply was modified 1 week, 5 days ago by Alex5723.
        1 user thanked author for this post.
      • #2304644 Reply
        anonymous
        Guest

        So unless you’ve specifically downloaded the Microsoft codec, you don’t need to worry about it – but be aware that this one is also coming through Windows Update.

        Like last time; this update is via Microsoft Store, not Windows Update:

        Why are these security updates offered to affected clients via the Microsoft Store and not Windows Update?
        These updates are for optional apps/components that are offered to customers as a download via the Microsoft Store. Updates for optional store apps/components are provided via the Microsoft Store.
        CVE-2020-17022 | Microsoft Windows Codecs Library Remote Code Execution Vulnerability FAQ

        But also like last time, “Get updates” in Microsoft Store produced nothing for me. So I used this store link again which did download/install the correct update:

        https://www.microsoft.com/en-us/p/hevc-video-extensions-from-device-manufacturer/9n4wgh0z6vhq

        1 user thanked author for this post.
        • #2304701 Reply
          woody
          Da Boss

          Like last time; this update is via Microsoft Store, not Windows Update

          You’re absolutely right. I changed the main post.

        • #2304880 Reply
          WCHS
          AskWoody Plus

          But also like last time, “Get updates” in Microsoft Store produced nothing for me. So I used this store link again which did download/install the correct update: ….

          On one of my Windows 10 devices, version 1909, I have the app HEVC Video  Extensions for Device Manufacturer v 1.0.32022.0 showing in Apps and Features, installed 08/07/2020.  For me, also, right now “Get updates” in Microsoft Store produced nothing.  I also did a search for “HEVC Video Extensions from Device Manufacturer” and nothing came up.

          Then, I went to the link and it said “HEVC Video Extensions from Device Manufacturer is currently not available”.

          What gives here, anyway??

          HEVC-Video-Extensions

          Offline: Win7Pro ∙ SP1 ∙ x64
          Online: Win10Pro ∙ 1909.18363 ∙ x64 ∙ i7-6500U ∙ RAM 12GB ∙ SSD ∙ Firefox ∙ McAfee Internet Security ∙ Windows Defender
          Online: Win10Pro ∙ 1909.18363 ∙ x64 ∙ i7-8565U ∙ RAM 16GB ∙ SSD ∙ Firefox ∙ McAfee Internet Security ∙ Windows Defender

          Attachments:
          • #2304885 Reply
            WCHS
            AskWoody Plus

            For me, also, right now “Get updates” in Microsoft Store produced nothing. I also did a search for “HEVC Video Extensions from Device Manufacturer” and nothing came up

            I just now signed into my MS account and clicked “Get updates.”  HEVC Video Extensions from Device Manufacturer then downloaded–v 1.0.32762.0

             

             

            Offline: Win7Pro ∙ SP1 ∙ x64
            Online: Win10Pro ∙ 1909.18363 ∙ x64 ∙ i7-6500U ∙ RAM 12GB ∙ SSD ∙ Firefox ∙ McAfee Internet Security ∙ Windows Defender
            Online: Win10Pro ∙ 1909.18363 ∙ x64 ∙ i7-8565U ∙ RAM 16GB ∙ SSD ∙ Firefox ∙ McAfee Internet Security ∙ Windows Defender

      • #2304804 Reply
        Microfix
        AskWoody MVP

        I found it strange then and still do now, that a patch was released via the MSFT Store…hey it’s Microsoft!
        Next we will be getting patches via facecloth, twatter and google ploy at this rate 😛

        Win8.1 Pro | Linux Hybrids | Win7 Pro O/L | WinXP O/L
    Viewing 3 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: Another HEVC codec bug fixed via the Microsoft Store – plus a couple of updates on this month’s mayhem

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.