CVEvulnerability
CVE-2009-2525
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-10-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly initialize unspecified functions within compressed audio files, which allows remote attackers to execute arbitrary code via (1) a crafted media file or (2) crafted streaming content, aka "Windows Media Runtime Heap Corruption Vulnerability."
Affected configurations
• microsoft windows 2000
• microsoft windows media format runtime 9.0
• microsoft windows media player 9
• microsoft windows media format runtime 9.5
• microsoft windows media format runtime 11
• microsoft windows xp
• microsoft windows server 2003
• microsoft windows server 2008
• microsoft windows vista
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://www.us-cert.gov/cas/techalerts/TA09-286A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6484 oval.cisecurity.org
- http://www.us-cert.gov/cas/techalerts/TA09-286A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6484 oval.cisecurity.org