Lucene search

[email protected]CVE-2009-2499

HistorySep 08, 2009 - 10:30 p.m.

CVE-2009-2499

2009-09-0822:30:00

CWE-94

[email protected]

web.nvd.nist.gov

microsoft

windows

media format runtime

vulnerability

remote code execution

memory corruption

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.963 High

EPSS

Percentile

99.5%

JSON

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka “Windows Media Playback Memory Corruption Vulnerability.”

Affected configurations

NVD

Node

microsoftwindows_media_format_runtimeMatch9.0

AND

microsoftwindows_2000Match-sp4

microsoftwindows_xpMatch-sp2

microsoftwindows_xpMatch-sp3

Node

microsoftwindows_media_format_runtimeMatch9.5

AND

microsoftwindows_server_2003sp2

microsoftwindows_xpsp2professional_x64

microsoftwindows_xpMatch-sp2

microsoftwindows_xpMatch-sp3

Node

microsoftwindows_media_format_runtimeMatch9.5x64

AND

microsoftwindows_server_2003sp2

microsoftwindows_xpsp2professional_x64

Node

microsoftwindows_media_format_runtimeMatch11

AND

microsoftwindows_server_2008Match--x32

microsoftwindows_server_2008Match--x64

microsoftwindows_server_2008Match-sp2x64

microsoftwindows_server_2008Match-sp2x86

microsoftwindows_vista

microsoftwindows_vistax64

microsoftwindows_vistasp1

microsoftwindows_vistasp2

microsoftwindows_vistaMatch-sp1

microsoftwindows_vistaMatch-sp2

microsoftwindows_xpsp2professional_x64

microsoftwindows_xpMatch-sp2

microsoftwindows_xpMatch-sp3

Node

microsoftwindows_media_servicesMatch9.1

AND

microsoftwindows_server_2003

microsoftwindows_server_2003sp2

Node

microsoftwindows_media_servicesMatch2008

AND

microsoftwindows_server_2008Match--x32

microsoftwindows_server_2008Match--x64

microsoftwindows_server_2008Match-sp2x64

microsoftwindows_server_2008Match-sp2x86

Node

microsoftwindows_media_foundationMatch-

AND

microsoftwindows_server_2008Match--x32

microsoftwindows_server_2008Match--x64

microsoftwindows_server_2008Match-sp2x64

microsoftwindows_server_2008Match-sp2x86

microsoftwindows_vista

microsoftwindows_vistasp1

microsoftwindows_vistasp2

microsoftwindows_vistaMatch--x64

microsoftwindows_vistaMatch-sp1

microsoftwindows_vistaMatch-sp2

CPENameOperatorVersion
microsoft:windows_media_format_runtimemicrosoft windows media format runtimeeq9.0
microsoft:windows_2000microsoft windows 2000eq-
microsoft:windows_xpmicrosoft windows xpeq-

CPE	Name	Operator	Version
microsoft:windows_media_format_runtime	microsoft windows media format runtime	eq	9.0
microsoft:windows_2000	microsoft windows 2000	eq	-
microsoft:windows_xp	microsoft windows xp	eq	-