Two vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious people to compromise a user's system.

1) DirectShow loads certain libraries in an insecure manner, which can be exploited to load arbitrary libraries by tricking a user into e.g. opening .wtv, .drv-ms, or .mpg files located on a remote WebDAV or SMB share.

2) An unspecified error exists within the Stream Buffer Engine (SBE.dll) when parsing Microsoft Digital Video Recording (.dvr-ms) media files.

Successful exploitation allows execution of arbitrary code.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
2) The vendor credits Matthew Watchinski.

Original Advisory
MS11-015 (KB2510030, KB2502898, KB2479943, KB2494132):
http://www.microsoft.com/technet/security/bulletin/MS11-015.mspx

Other references
Further details available to Secunia VIM customers

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers