← Database

CVE-2009-2499

HIGH CVSS: 8.5 Published: 2009-09-08 Modified: 2026-06-16

Description

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory Corruption Vulnerability."

Affected Platforms

Microsoft Windows Media Format RuntimeMicrosoft Windows XpMicrosoft Windows Server 2003Microsoft Windows Server 2008Microsoft Windows 2000Microsoft Windows VistaMicrosoft Windows Media ServicesMicrosoft Windows Media Foundation

Weakness Type

CWE-94

References