Lucene search
MicrosoftCVE-2009-2527HistoryOct 14, 2009 - 10:30 a.m.
CVE-2009-2527
2009-10-1410:30:01
CWE-119
microsoft
web.nvd.nist.gov
24
cve-2009-2527
heap-based overflow
microsoft windows media player
remote code execution
asf file
streaming content
vulnerability
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.803
Percentile
98.3%
Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via (1) a crafted ASF file or (2) crafted streaming content, aka βWMP Heap Overflow Vulnerability.β
Affected configurations
Node
microsoftwindows_2000Matchsp4
ORmicrosoftwindows_2003_serverMatchsp2
ORmicrosoftwindows_2003_serverMatchsp2x64
ORmicrosoftwindows_xpsp2pro_x64
ORmicrosoftwindows_xpMatch-
ORmicrosoftwindows_xpMatchsp3
microsoftwindows_media_playerMatch6.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_2000 | sp4 | cpe:2.3:o:microsoft:windows_2000:sp4:*:*:*:*:*:*:* |
| microsoft | windows_2003_server | sp2 | cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:* |
| microsoft | windows_2003_server | sp2 | cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:* |
| microsoft | windows_xp | * | cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:* |
| microsoft | windows_xp | - | cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:* |
| microsoft | windows_xp | sp3 | cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:* |
| microsoft | windows_media_player | 6.4 | cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:* |
Related
openvas
openvas
Microsoft Windows Media Player ASF Heap Overflow Vulnerability (974112)
2009-10-14 00:00:00
Microsoft Windows Media Player ASF Heap Overflow Vulnerability (974112)
2009-10-14 00:00:00
prion
prion
Heap overflow
2009-10-14 10:30:00
nessus
nessus
seebug
seebug
checkpoint_advisories
checkpoint_advisories
securityvulns
securityvulns
cvelist
cvelist
CVE-2009-2527
2009-10-14 10:00:00
nvd
nvd
CVE-2009-2527
2009-10-14 10:30:01
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.803
Percentile
98.3%
Related for CVE-2009-2527