Published: 13/12/2009 Updated: 10/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote malicious users to execute arbitrary code via a large size value in a movi record in an IV41 stream in a media file, as demonstrated by an AVI file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows_media_player
microsoft windows_2003_server
microsoft windows_xp
microsoft windows_xp -
microsoft windows_2000

CWE-119 http://zerodayinitiative.com/advisories/ZDI-09-089/http://www.vupen.com/english/advisories/2009/3440 http://support.microsoft.com/kb/976138 http://secunia.com/advisories/37592 http://securitytracker.com/id?1023302 http://www.securityfocus.com/bid/37251 http://support.microsoft.com/kb/954157 http://www.microsoft.com/technet/security/advisory/954157.mspx http://support.microsoft.com/kb/955759 http://www.osvdb.org/60855 https://exchange.xforce.ibmcloud.com/vulnerabilities/54645 https://exchange.xforce.ibmcloud.com/vulnerabilities/54642 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12188 http://www.securityfocus.com/archive/1/508324/100/0/threaded https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-4309

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect