CVE-2010-1879

CVE-2010-1879 corresponds to a remote code execution vulnerability in Microsoft DirectShow/Media Decompression. The issue affects Quartz.dll (DirectShow), Windows Media Format Runtime versions 9, 9.5, 11, Media Encoder 9, and Asycfilt.dll, where specially crafted media data (notably MJPEG in AVI ...

CVE-2008-3009

The CVE-2008-3009 issue affects Windows Media components: Windows Media Player 6.4, Windows Media Format Runtime (7.1–11), and Windows Media Services (4.1, 9, 2008). It stems from improper handling of SPNs during NTLM authentication, enabling a remote attacker to perform credential reflection and...

CVE-2013-3127

The CVE-2013-3127 issue affects the Windows Media Format Runtime components: wmv9vcm.dll, wmvdmod.dll (WMV9/9.5) and wmvdecod.dll (WMV11/WM Player 11/12). The underlying problem is a remote code execution vulnerability triggered by parsing crafted media files, enabling an attacker to run arbitrar...

CVE-2007-0064

The CVE-2007-0064 entry concerns a heap-based buffer overflow in the Windows Media Format Runtime (and Windows Media Services) ASF parsing code. A remote attacker could exploit this by delivering a specially crafted ASF file, potentially allowing arbitrary code execution on affected systems. Affe...