CVEvulnerability
CVE-2007-0064
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-12-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
Affected configurations
• microsoft windows media format runtime 7.1
• microsoft windows media format runtime 9
• microsoft windows media format runtime 9.5
• microsoft windows media format runtime 11
• microsoft windows media services 9.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/28034 Vendor Advisory
- http://www.kb.cert.org/vuls/id/319385 US Government Resource
- http://www.securityfocus.com/archive/1/485268/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26776 www.securityfocus.com
- http://www.securitytracker.com/id?1019074 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-345A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/4183 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-068 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3622 oval.cisecurity.org
- http://secunia.com/advisories/28034 Vendor Advisory
- http://www.kb.cert.org/vuls/id/319385 US Government Resource
- http://www.securityfocus.com/archive/1/485268/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26776 www.securityfocus.com
- http://www.securitytracker.com/id?1019074 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-345A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/4183 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-068 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3622 oval.cisecurity.org