Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition…
Priority HIGH 66CWE-119Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.
Summary
Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
Why it matters now
EPSS 0.35976 98th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 16
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:* | all versions | Running on | Microsoft |
| cpe:2.3:a:microsoft:windows_media_format_runtime:7.1:*:*:*:*:*:*:* | 7.1 | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:* | all versions | Running on | Microsoft |
| cpe:2.3:a:microsoft:windows_media_format_runtime:9:*:*:*:*:*:*:* | 9 | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:* | all versions | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:* | all versions | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:* | all versions | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:* | all versions | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:* | all versions | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:* | all versions | Running on | Microsoft |
- cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:* Versions all versions Running on ·Microsoft
- cpe:2.3:a:microsoft:windows_media_format_runtime:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:* Versions all versions Running on ·Microsoft
- cpe:2.3:a:microsoft:windows_media_format_runtime:9:*:*:*:*:*:*:* Versions 9 Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:* Versions all versions Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:* Versions all versions Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:* Versions all versions Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:* Versions all versions Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:* Versions all versions Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:* Versions all versions Running on ·Microsoft
Show 6 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:* | 9.5 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:x64:*:*:*:*:* | 9.5 | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:* | all versions | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:* | 11 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:windows_media_services:9.1:*:*:*:*:*:*:* | 9.1 | Vulnerable | Microsoft |
- cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:* Versions 9.5 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:x64:*:*:*:*:* Versions 9.5 Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:* Versions all versions Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:* Versions 11 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:windows_media_services:9.1:*:*:*:*:*:*:* Versions 9.1 Vulnerable ·Microsoft
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2007-0064
- 2026-10-03 Alias added: GHSA-7p6v-hr2m-q9r8
References
Advisory 4
Other 1
More Microsoft Windows Media Format Runtime vulnerabilities
- TI-2009-00534 Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media… CVSS 2.0HIGH 9.3
- TI-2013-02727 The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime… CVSS 2.0HIGH 9.3
- TI-2009-02411 Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media… CVSS 2.0HIGH 9.3
- TI-2010-01798 Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9… CVSS 2.0HIGH 9.3
- TI-2009-02386 Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1… CVSS 2.0HIGH 9.3
- TI-2008-02882 Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and… CVSS 2.0HIGH 10.0
Sources
- CVE-2007-0064 · CVE Program
- CVE-2007-0064 · NVD
- FIRST EPSS
- GHSA-7p6v-hr2m-q9r8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences