Lucene search

K
cve[email protected]CVE-2009-2499
HistorySep 08, 2009 - 10:30 p.m.

CVE-2009-2499

2009-09-0822:30:00
CWE-94
web.nvd.nist.gov
50
microsoft
windows
media format runtime
vulnerability
remote code execution
memory corruption

7.4 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.963 High

EPSS

Percentile

99.5%

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka “Windows Media Playback Memory Corruption Vulnerability.”

7.4 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.963 High

EPSS

Percentile

99.5%