Lucene search

MitreCVE-2007-0064

HistoryDec 12, 2007 - 12:46 a.m.

CVE-2007-0064

2007-12-1200:46:00

CWE-119

mitre

web.nvd.nist.gov

cve-2007-0064

windows media format runtime

buffer overflow

windows media services

nvd

security vulnerability

windows 2000

windows xp

server 2003

vista

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.858

Percentile

98.6%

JSON

Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.

Affected configurations

Nvd

Node

microsoftwindows_2000sp4

AND

microsoftwindows_media_format_runtimeMatch7.1

Node

microsoftwindows_2000sp4

microsoftwindows_xpsp2

AND

microsoftwindows_media_format_runtimeMatch9

Node

microsoftwindows_2003_serverx64

microsoftwindows_2003_serversp1

microsoftwindows_2003_serversp2

microsoftwindows_2003_serversp2x64

microsoftwindows_xpx64

microsoftwindows_xpsp2

microsoftwindows_xpsp2x64

AND

microsoftwindows_media_format_runtimeMatch9.5

Node

microsoftwindows_2003_serverx64

microsoftwindows_2003_serversp2x64

microsoftwindows_xpx64

microsoftwindows_xpsp2x64

AND

microsoftwindows_media_format_runtimeMatch9.5x64

Node

microsoftwindows_vistax64

microsoftwindows_vistaMatch-

microsoftwindows_xpx64

microsoftwindows_xpsp2

microsoftwindows_xpsp2x64

AND

microsoftwindows_media_format_runtimeMatch11

Node

microsoftwindows_2003_serverx64

microsoftwindows_2003_serversp1

microsoftwindows_2003_serversp2

microsoftwindows_2003_serversp2x64

AND

microsoftwindows_media_servicesMatch9.1

VendorProductVersionCPE
microsoftwindows_2000*cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
microsoftwindows_media_format_runtime7.1cpe:2.3:a:microsoft:windows_media_format_runtime:7.1:*:*:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
microsoftwindows_media_format_runtime9cpe:2.3:a:microsoft:windows_media_format_runtime:9:*:*:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_2000	*	cpe:2.3:o:microsoft:windows_2000::sp4::::::*
microsoft	windows_media_format_runtime	7.1	cpe:2.3:a:microsoft:windows_media_format_runtime:7.1:::::::*
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::sp2::::::*
microsoft	windows_media_format_runtime	9	cpe:2.3:a:microsoft:windows_media_format_runtime:9:::::::*
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server:::x64:::::*
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::sp1::::::*
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::sp2::::::*
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::sp2:x64:::::
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp:::x64:::::*
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::sp2:x64:::::