Lucene search

[email protected]CVE-2009-2525

HistoryOct 14, 2009 - 10:30 a.m.

CVE-2009-2525

2009-10-1410:30:01

CWE-94

[email protected]

web.nvd.nist.gov

cve-2009-2525

windows

media runtime

remote code execution

crafted media files

streaming content

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.759 High

EPSS

Percentile

98.2%

JSON

Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly initialize unspecified functions within compressed audio files, which allows remote attackers to execute arbitrary code via (1) a crafted media file or (2) crafted streaming content, aka “Windows Media Runtime Heap Corruption Vulnerability.”

Affected configurations

NVD

Node

microsoftwindows_2000sp4

AND

microsoftwindows_media_format_runtimeMatch9.0

microsoftwindows_media_playerMatch9

Node

microsoftwindows_media_format_runtimeMatch9.0

microsoftwindows_media_format_runtimeMatch9.5

microsoftwindows_media_format_runtimeMatch11

AND

microsoftwindows_xpsp2

microsoftwindows_xpsp2x64

microsoftwindows_xpsp3

Node

microsoftwindows_media_format_runtimeMatch9.5

AND

microsoftwindows_server_2003sp2

Node

microsoftwindows_media_format_runtimeMatch11

AND

microsoftwindows_server_2008x32

microsoftwindows_server_2008x64

microsoftwindows_server_2008sp2x32

microsoftwindows_server_2008sp2x64

microsoftwindows_vista

microsoftwindows_vistax64

microsoftwindows_vistasp1

microsoftwindows_vistasp2

CPENameOperatorVersion
microsoft:windows_2000microsoft windows 2000eq*
microsoft:windows_media_format_runtimemicrosoft windows media format runtimeeq9.0
microsoft:windows_media_playermicrosoft windows media playereq9

CPE	Name	Operator	Version
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:windows_media_format_runtime	microsoft windows media format runtime	eq	9.0
microsoft:windows_media_player	microsoft windows media player	eq	9