Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-4313
HistoryDec 13, 2009 - 1:30 a.m.

CVE-2009-4313

2009-12-1301:30:00
CWE-119
[email protected]
web.nvd.nist.gov
5

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.104

Percentile

95.0%

JSON

ir32_32.dll 3.24.15.3 in the Indeo32 codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (heap corruption) or execute arbitrary code via malformed data in a stream in a media file, as demonstrated by an AVI file.

Affected configurations

Nvd
Node
microsoftwindows_2000sp4
OR
microsoftwindows_2003_serversp2
OR
microsoftwindows_2003_serversp2itanium
OR
microsoftwindows_2003_serversp2x64
OR
microsoftwindows_xpsp3
OR
microsoftwindows_xpMatch-sp2
OR
microsoftwindows_xpMatch-sp2x64

Related

cve 1
cvelist 1
prion 1
openvas 2
nessus 1
cve
cve
CVE-2009-4313
2009-12-13 01:30:00
cvelist
cvelist
CVE-2009-4313
2009-12-13 01:00:00
prion
prion
Heap overflow
2009-12-13 01:30:00
openvas
openvas
Microsoft Windows Indeo Codec Multiple Vulnerabilities
2009-12-17 00:00:00
Microsoft Windows Indeo Codec Multiple Vulnerabilities
2009-12-17 00:00:00
nessus
nessus
MS KB955759: Security Enhancements for the Indeo Codec
2009-12-09 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.104

Percentile

95.0%

JSON
Related for NVD:CVE-2009-4313
cve1cvelist1prion1openvas2nessus1