HIGH✓ PATCH🇬🇧 English

CVE-2009-4309

CVSS 9.3v2.0pub. 2009-12-13upd. 2026-04-23

Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a large size value in a movi record in an IV41 stream in a media file, as demonstrated by an AVI file.

oryginał EN
CVSS Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Microsoft Windows 2000

    OS
    Microsoft
    wszystkie wersje

  • Microsoft Windows 2003 Server

    OS
    Microsoft
    wszystkie wersje

  • Microsoft Windows Media Player

    APP
    Microsoft
    wszystkie wersje

  • Microsoft Windows Xp

    OS
    Microsoft
    wszystkie wersje
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
RCEMemory
CWE
Referencje

Powiązane podatności

CVE-2014-1776CRITICAL9.8⚠ KEVten sam produkt

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute ar...

CVE-2008-4250CRITICAL9.8⚠ KEVten sam produkt

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1,...

CVE-2019-5620CRITICAL9.8ten sam produkt

ABB MicroSCADA Pro SYS600 version 9.3 suffers from an instance of CWE-306: Missing Authentication for Critical...

CVE-2020-7485CRITICAL9.8ten sam produkt

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and...

CVE-2012-1891CRITICAL9.8ten sam produkt

Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access ...

CVE-2009-4309 — HIGH 9.3 | CVEbaza.pl