CVE-2008-2253

2008-09-1101:10:13

CWE-94

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.81

Percentile

98.4%

JSON

Unspecified vulnerability in Microsoft Windows Media Player 11 allows remote attackers to execute arbitrary code via a crafted audio-only file that is streamed from a Server-Side Playlist (SSPL) on Windows Media Server, aka “Windows Media Player Sampling Rate Vulnerability.”

Affected configurations

Nvd

Node

microsoftwindows_media_playerMatch11

AND

microsoftwindows-ntMatch2008

microsoftwindows-ntMatch2008x64

microsoftwindows-ntMatchxpgoldx64

microsoftwindows-ntMatchxpsp2prox64

microsoftwindows-ntMatchxpsp3

microsoftwindows_xpMatch-sp2

VendorProductVersionCPE
microsoftwindows_media_player11cpe:2.3:a:microsoft:windows_media_player:11:*:*:*:*:*:*:*
microsoftwindows-nt2008cpe:2.3:o:microsoft:windows-nt:2008:*:*:*:*:*:*:*
microsoftwindows-nt2008cpe:2.3:o:microsoft:windows-nt:2008:*:*:*:*:*:x64:*
microsoftwindows-ntxpcpe:2.3:o:microsoft:windows-nt:xp:*:*:*:gold:*:x64:*
microsoftwindows-ntxpcpe:2.3:o:microsoft:windows-nt:xp:sp2:*:*:pro:*:x64:*
microsoftwindows-ntxpcpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*
microsoftwindows_xp-cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_media_player	11	cpe:2.3:a:microsoft:windows_media_player:11:::::::*
microsoft	windows-nt	2008	cpe:2.3:o:microsoft:windows-nt:2008:::::::*
microsoft	windows-nt	2008	cpe:2.3:o:microsoft:windows-nt:2008::::::x64:
microsoft	windows-nt	xp	cpe:2.3:o:microsoft:windows-nt:xp::::gold::x64:*
microsoft	windows-nt	xp	cpe:2.3:o:microsoft:windows-nt:xp:sp2:::pro::x64:
microsoft	windows-nt	xp	cpe:2.3:o:microsoft:windows-nt:xp:sp3::::::
microsoft	windows_xp	-	cpe:2.3:o:microsoft:windows_xp:-:sp2::::::