Lucene search
MicrosoftCVE-2009-2498HistorySep 08, 2009 - 10:30 p.m.
CVE-2009-2498
2009-09-0822:30:00
CWE-94
microsoft
web.nvd.nist.gov
58
cve-2009-2498
microsoft
windows
media format
runtime
windows media services
vulnerability
asf
malformed headers
remote execution
arbitrary code
file parsing
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.4
Confidence
Low
EPSS
0.731
Percentile
98.2%
Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka βWindows Media Header Parsing Invalid Free Vulnerability.β
Affected configurations
Node
microsoftwindows_media_format_runtimeMatch9.0
microsoftwindows_2000Match-sp4
ORmicrosoftwindows_xpMatch-sp2
ORmicrosoftwindows_xpMatch-sp3
Node
microsoftwindows_media_format_runtimeMatch9.5
microsoftwindows_server_2003sp2
ORmicrosoftwindows_xpsp2professional_x64
ORmicrosoftwindows_xpMatch-sp2
ORmicrosoftwindows_xpMatch-sp3
Node
microsoftwindows_media_format_runtimeMatch9.5x64
microsoftwindows_server_2003sp2
ORmicrosoftwindows_xpsp2professional_x64
Node
microsoftwindows_media_format_runtimeMatch11
microsoftwindows_server_2008Match--x32
ORmicrosoftwindows_server_2008Match--x64
ORmicrosoftwindows_server_2008Match-sp2x64
ORmicrosoftwindows_server_2008Match-sp2x86
ORmicrosoftwindows_vista
ORmicrosoftwindows_vistax64
ORmicrosoftwindows_vistasp1
ORmicrosoftwindows_vistasp2
ORmicrosoftwindows_vistaMatch-sp1
ORmicrosoftwindows_vistaMatch-sp2
ORmicrosoftwindows_xpsp2professional_x64
ORmicrosoftwindows_xpMatch-sp2
ORmicrosoftwindows_xpMatch-sp3
Node
microsoftwindows_media_servicesMatch9.1
microsoftwindows_server_2003
ORmicrosoftwindows_server_2003sp2
Node
microsoftwindows_media_servicesMatch2008
microsoftwindows_server_2008Match--x32
ORmicrosoftwindows_server_2008Match--x64
ORmicrosoftwindows_server_2008Match-sp2x64
ORmicrosoftwindows_server_2008Match-sp2x86
Node
microsoftmedia_foundation_sdk
microsoftwindows_server_2008Match--x32
ORmicrosoftwindows_server_2008Match--x64
ORmicrosoftwindows_server_2008Match-sp2x64
ORmicrosoftwindows_server_2008Match-sp2x86
ORmicrosoftwindows_vista
ORmicrosoftwindows_vistasp1
ORmicrosoftwindows_vistasp2
ORmicrosoftwindows_vistaMatch--x64
ORmicrosoftwindows_vistaMatch-sp1
ORmicrosoftwindows_vistaMatch-sp2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_media_format_runtime | 9.0 | cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*:*:*:* |
| microsoft | windows_2000 | - | cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:* |
| microsoft | windows_xp | - | cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:* |
| microsoft | windows_xp | - | cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:* |
| microsoft | windows_media_format_runtime | 9.5 | cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:* |
| microsoft | windows_server_2003 | * | cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:* |
| microsoft | windows_xp | * | cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:* |
| microsoft | windows_media_format_runtime | 9.5 | cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:x64:*:*:*:*:* |
| microsoft | windows_media_format_runtime | 11 | cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:* |
| microsoft | windows_server_2008 | - | cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:* |
Related
seebug
seebug
prion
prion
Design/Logic Flaw
2009-09-08 22:30:00
nvd
nvd
CVE-2009-2498
2009-09-08 22:30:00
checkpoint_advisories
checkpoint_advisories
cvelist
cvelist
CVE-2009-2498
2009-09-08 22:00:00
nessus
nessus
MS09-047: Windows Media Format Multiple Vulnerabilities (Windows Vista / Server 2008)
2009-09-11 00:00:00
MS09-047: Vulnerabilities in Windows Media Format Could Allow Remote Code Execution (973812)
2009-09-08 00:00:00
MS09-047: Windows Media Format Multiple Vulnerabilities (Windows XP 32-bit)
2009-09-11 00:00:00
securityvulns
securityvulns
openvas
openvas
Microsoft Windows Media Format Remote Code Execution Vulnerability (973812)
2009-09-10 00:00:00
Microsoft Windows Media Format Remote Code Execution Vulnerability (973812)
2009-09-10 00:00:00
jvn
jvn
JVN#62211338 Buffer overflow vulnerability in Microsoft Windows
2009-09-09 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.4
Confidence
Low
EPSS
0.731
Percentile
98.2%
Related for CVE-2009-2498