CVE-2009-2527

2009-10-1410:30:01

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.803

Percentile

98.3%

JSON

Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via (1) a crafted ASF file or (2) crafted streaming content, aka “WMP Heap Overflow Vulnerability.”

Affected configurations

Nvd

Node

microsoftwindows_2000Matchsp4

microsoftwindows_2003_serverMatchsp2

microsoftwindows_2003_serverMatchsp2x64

microsoftwindows_xpsp2pro_x64

microsoftwindows_xpMatch-

microsoftwindows_xpMatchsp3

AND

microsoftwindows_media_playerMatch6.4

VendorProductVersionCPE
microsoftwindows_2000sp4cpe:2.3:o:microsoft:windows_2000:sp4:*:*:*:*:*:*:*
microsoftwindows_2003_serversp2cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*
microsoftwindows_2003_serversp2cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*
microsoftwindows_xp-cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*
microsoftwindows_xpsp3cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*
microsoftwindows_media_player6.4cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_2000	sp4	cpe:2.3:o:microsoft:windows_2000:sp4:::::::*
microsoft	windows_2003_server	sp2	cpe:2.3:o:microsoft:windows_2003_server:sp2:::::::*
microsoft	windows_2003_server	sp2	cpe:2.3:o:microsoft:windows_2003_server:sp2::x64:::::
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::sp2:pro_x64:::::
microsoft	windows_xp	-	cpe:2.3:o:microsoft:windows_xp:-:::::::*
microsoft	windows_xp	sp3	cpe:2.3:o:microsoft:windows_xp:sp3:::::::*
microsoft	windows_media_player	6.4	cpe:2.3:a:microsoft:windows_media_player:6.4:::::::*