CVEvulnerability
CVE-2009-4309
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-12-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a large size value in a movi record in an IV41 stream in a media file, as demonstrated by an AVI file.
Affected configurations
• microsoft windows media player
• microsoft windows 2000
• microsoft windows 2003 server
• microsoft windows xp
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/37592 Vendor Advisory
- http://securitytracker.com/id?1023302 Patch
- http://support.microsoft.com/kb/954157 Patch, Vendor Advisory
- http://support.microsoft.com/kb/955759 Patch, Vendor Advisory
- http://support.microsoft.com/kb/976138 Patch, Vendor Advisory
- http://www.microsoft.com/technet/security/advisory/954157.mspx Patch, Vendor Advisory
- http://www.osvdb.org/60855 www.osvdb.org
- http://www.securityfocus.com/archive/1/508324/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/37251 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3440 Vendor Advisory
- http://zerodayinitiative.com/advisories/ZDI-09-089/ zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54642 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54645 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12188 oval.cisecurity.org
- http://secunia.com/advisories/37592 Vendor Advisory
- http://securitytracker.com/id?1023302 Patch
- http://support.microsoft.com/kb/954157 Patch, Vendor Advisory
- http://support.microsoft.com/kb/955759 Patch, Vendor Advisory
- http://support.microsoft.com/kb/976138 Patch, Vendor Advisory
- http://www.microsoft.com/technet/security/advisory/954157.mspx Patch, Vendor Advisory
- http://www.osvdb.org/60855 www.osvdb.org
- http://www.securityfocus.com/archive/1/508324/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/37251 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3440 Vendor Advisory
- http://zerodayinitiative.com/advisories/ZDI-09-089/ zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54642 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54645 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12188 oval.cisecurity.org