Zero-friction vulnerability management platform

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

CVE-2009-0555

CVE information

Published

12 years ago

Last Modified

3 years ago

CVSSv2.0 Severity

High

Impact Analysis

Description

Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly process Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted audio file that uses the Windows Media Speech codec, aka "Windows Media Runtime Voice Sample Rate Vulnerability.".

CVSSv2.0 Score

Severity
High
Base Score
9.3/10
Exploit Score
8.6/10
Access Vector
Network
Access Complexity
Medium
Authentication Required
None
Impact Score
10/10
Confidentiality Impact
Complete
Availability Impact
Complete
Integrity Impact
Complete

Products Affected

CPE Affected Vulnerable Excluding Edit
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
  Yes
-
cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*
  Yes
-
cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*
  Yes
-
cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*
  Yes
-
cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:
  Yes
-
cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*
  Yes
-
cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
  Yes
-
cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:x64:*
  Yes
-
cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
  Yes
-
cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*
  Yes
-
cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
  Yes
-
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
  Yes
-
cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:
  Yes
-
cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x86:*
  Yes
-
cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x64:*
  Yes
-
cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
  Yes
-
cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:x64:*
  Yes
-
cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*
  Yes
-
cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*
  Yes
-
cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:x64:*
  Yes
-
cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:x64:*
  Yes
-
cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:x86:*
  Yes
-
cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:x64:*
  Yes
-