Priority HIGH 66
Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.35976 · Published 2007-12-12 · No fix listed CWE-119
Priority MEDIUM 62
Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly process Advanced Systems Format (ASF) files, which allows…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.27086 · Published 2009-10-14 · No fix listed CWE-94
Priority MEDIUM 60
The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execu…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.2191 · Published 2013-07-10 · No fix listed CWE-94
Priority MEDIUM 60
Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly initialize unspecified functions within compressed audio f…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.23318 · Published 2009-10-14 · No fix listed CWE-94
Priority MEDIUM 59
Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary code via a media file…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.20284 · Published 2010-06-08 · No fix listed CWE-94
Priority MEDIUM 59
Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arb…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.2121 · Published 2009-09-08 · No fix listed CWE-94
Priority MEDIUM 59
Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to auth…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.1583 · Published 2008-12-10 · No fix listed CWE-255
Priority MEDIUM 53
Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.15546 · Published 2009-09-08 · No fix listed CWE-94