CVEvulnerability
CVE-2009-0555
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-10-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly process Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted audio file that uses the Windows Media Speech codec, aka "Windows Media Runtime Voice Sample Rate Vulnerability."
Affected configurations
• microsoft windows 2000
• microsoft windows media format runtime 9.0
• microsoft windows media player 9
• microsoft windows media format runtime 9.5
• microsoft windows media format runtime 11
• microsoft windows xp
• microsoft windows server 2003
• microsoft windows server 2008
• microsoft windows vista
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://www.us-cert.gov/cas/techalerts/TA09-286A.html Third Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051 Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6407 Third Party Advisory
- http://www.us-cert.gov/cas/techalerts/TA09-286A.html Third Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051 Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6407 Third Party Advisory