Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-2498

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka "Windows Media Header Parsing Invalid Free Vulnerability."

Published

2009-09-08T22:30:00.407

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-94
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application microsoft windows_media_format_runtime 9.0 Yes
Operating System microsoft windows_2000 - Yes
Operating System microsoft windows_xp - Yes
Operating System microsoft windows_xp - Yes
Application microsoft windows_media_format_runtime 9.5 Yes
Operating System microsoft windows_server_2003 * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp - Yes
Operating System microsoft windows_xp - Yes
Application microsoft windows_media_format_runtime 9.5 Yes
Operating System microsoft windows_server_2003 * Yes
Operating System microsoft windows_xp * Yes
Application microsoft windows_media_format_runtime 11 Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_vista * Yes
Operating System microsoft windows_vista * Yes
Operating System microsoft windows_vista * Yes
Operating System microsoft windows_vista * Yes
Operating System microsoft windows_vista - Yes
Operating System microsoft windows_vista - Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp - Yes
Operating System microsoft windows_xp - Yes
Application microsoft windows_media_services 9.1 Yes
Operating System microsoft windows_server_2003 * Yes
Operating System microsoft windows_server_2003 * Yes
Application microsoft windows_media_services 2008 Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_server_2008 - Yes
Application microsoft media_foundation_sdk * Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_vista * Yes
Operating System microsoft windows_vista * Yes
Operating System microsoft windows_vista * Yes
Operating System microsoft windows_vista - Yes
Operating System microsoft windows_vista - Yes
Operating System microsoft windows_vista - Yes
References