CVEvulnerability
CVE-2009-4310
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-12-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted compressed video data in an IV41 stream in a media file, leading to many loop iterations, as demonstrated by data in an AVI file.
Affected configurations
• microsoft windows 2000
• microsoft windows 2003 server
• microsoft windows xp
• windows media player
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/37592 Vendor Advisory
- http://securitytracker.com/id?1023302 Patch
- http://support.microsoft.com/kb/954157 Patch, Vendor Advisory
- http://support.microsoft.com/kb/955759 Patch, Vendor Advisory
- http://support.microsoft.com/kb/976138 Patch, Vendor Advisory
- http://www.microsoft.com/technet/security/advisory/954157.mspx Patch, Vendor Advisory
- http://www.osvdb.org/60856 www.osvdb.org
- http://www.securityfocus.com/archive/1/508335/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/37251 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3440 Vendor Advisory
- http://zerodayinitiative.com/advisories/ZDI-09-090/ zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54643 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54645 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11596 oval.cisecurity.org
- http://secunia.com/advisories/37592 Vendor Advisory
- http://securitytracker.com/id?1023302 Patch
- http://support.microsoft.com/kb/954157 Patch, Vendor Advisory
- http://support.microsoft.com/kb/955759 Patch, Vendor Advisory
- http://support.microsoft.com/kb/976138 Patch, Vendor Advisory
- http://www.microsoft.com/technet/security/advisory/954157.mspx Patch, Vendor Advisory
- http://www.osvdb.org/60856 www.osvdb.org
- http://www.securityfocus.com/archive/1/508335/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/37251 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3440 Vendor Advisory
- http://zerodayinitiative.com/advisories/ZDI-09-090/ zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54643 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54645 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11596 oval.cisecurity.org