Microsoft Windows Media formats security vulnerabilities

Uninitialized pointer free on ASF files parsing, memory corruption on MP3 files parsing...

CVE-2009-2498

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format ASF files, which allows remote attackers to execute arbitrary code via a crafted 1 .asf, 2 .wmv, or 3 .wma file, aka "Windows Media...

Design/Logic Flaw

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format ASF files, which allows remote attackers to execute arbitrary code via a crafted 1 .asf, 2 .wmv, or 3 .wma file, aka "Windows Media...

CVE-2009-2498

The CVE-2009-2498 entry corresponds to a code-execution vulnerability in Microsoft Windows Media Format Runtime (versions 9.0, 9.5, 11) and Windows Media Services 9.1/2008, triggered by parsing malformed ASF/WMV/WMA headers. Connected advisories (e.g., CPAI-2014-1114; OpenVAS 901012) corroborate ...

CVE-2009-2498

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format ASF files, which allows remote attackers to execute arbitrary code via a crafted 1 .asf, 2 .wmv, or 3 .wma file, aka "Windows Media...

Microsoft Windows ASF File Media Header Parsing Code Execution (MS09-047; CVE-2009-2498)

ASF Advanced Systems Format is a file format that stores audio and video information and is specially designed to run over networks like the Internet. It is a compressed format that contains streaming audio, video, slide shows, and synchronized events. ASF enables content to be delivered as a...

Microsoft Windows Media Format ASF Header Invalid Free Memory Corruption Vulnerability

Description Microsoft Windows is prone to a remote memory-corruption vulnerability that arises when an affected Windows component handles a malicious ASF file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the currently logged-in user. Failed attacks wil...

PT-2009-4905 · Microsoft · Windows Media Format Runtime +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Format Runtime versions 9.0, 9.5, and 11 Windows Media Services versions 9.1 and 2008 Description: The issue arises from the improper parsing of malformed headers in Advanced Systems Format ASF files, which can lead to...

MS09-047: Vulnerabilities in Windows Media Format Could Allow Remote Code Execution (973812)

The remote Windows host contains a version of the Windows Media Format Runtime or Windows Media Services that is affected by multiple vulnerabilities : - The ASF parser has an invalid free vulnerability. A remote attacker could exploit this by tricking a user into opening a specially crafted ASF...

Stack overflow

Stack-based buffer overflow in Streaming Download Project SDP Downloader 2.3.0 allows remote attackers to execute arbitrary code via a long .asf URL in the HREF attribute of a REF element in a .asx file...

CVE-2009-1627

Stack-based buffer overflow in Streaming Download Project SDP Downloader 2.3.0 allows remote attackers to execute arbitrary code via a long .asf URL in the HREF attribute of a REF element in a .asx file...

Mandriva Update for xine-lib MDVSA-2008:178 (xine-lib)

Check for the Version of xine-lib OpenVAS Vulnerability Test Mandriva Update for xine-lib MDVSA-2008:178 xine-lib Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for xine-lib MDVSA-2008:178 (xine-lib)

Check for the Version of xine-lib OpenVAS Vulnerability Test Mandriva Update for xine-lib MDVSA-2008:178 xine-lib Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for gstreamer0.10-plugins-ugly MDVA-2008:181 (gstreamer0.10-plugins-ugly)

Check for the Version of gstreamer0.10-plugins-ugly OpenVAS Vulnerability Test Mandriva Update for gstreamer0.10-plugins-ugly MDVA-2008:181 gstreamer0.10-plugins-ugly Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu Update for xine-lib vulnerabilities USN-635-1

Ubuntu Update for Linux kernel vulnerabilities USN-635-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6351.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for xine-lib vulnerabilities USN-635-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

VUPlayer .asx Playlist File Buffer Overflow Vulnerability

This host is installed with VUPlayer and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodvuplayerasxplaylistbofvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ VUPlayer .asx Playlist File Buffer Overflow Vulnerability Authors: Sharath S Copyright: Copyright c 2009...

CVE-2009-0174

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file...

CVE-2009-0174

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file...

Gentoo Security Advisory GLSA 200802-12 (xine-lib)

The remote host is missing updates announced in advisory GLSA 200802-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200603-03 (MPlayer)

The remote host is missing updates announced in advisory GLSA 200603-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...