Lucene search

K
nvd[email protected]NVD:CVE-2009-2527
HistoryOct 14, 2009 - 10:30 a.m.

CVE-2009-2527

2009-10-1410:30:01
CWE-119
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.803 High

EPSS

Percentile

98.3%

Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via (1) a crafted ASF file or (2) crafted streaming content, aka β€œWMP Heap Overflow Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_2000Matchsp4
OR
microsoftwindows_2003_serverMatchsp2
OR
microsoftwindows_2003_serverMatchsp2x64
OR
microsoftwindows_xpsp2pro_x64
OR
microsoftwindows_xpMatch-
OR
microsoftwindows_xpMatchsp3
AND
microsoftwindows_media_playerMatch6.4

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.803 High

EPSS

Percentile

98.3%