CVSS: 9.3EPSS: 57%CPEs: 45EXPL: 0CVE-2009-2498
https://notcve.org/view.php?id=CVE-2009-2498
08 Sep 2009 — Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka "Windows Media Header Parsing Invalid Free Vulnerability." Microsoft Windows Media Format Runtime v9.0, v9.5, y v11 y Windows Media Services v9.1 y 2008 no no analiza apropiadamente cabeceras malformadas en archivos Advanced... • http://www.us-cert.gov/cas/techalerts/TA09-251A.html • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 8.5EPSS: 52%CPEs: 45EXPL: 0CVE-2009-2499
https://notcve.org/view.php?id=CVE-2009-2499
08 Sep 2009 — Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory Corruption Vulnerability." Microsoft Windows Media Format Runtime v9.0, v9.5, y v11; y Microsoft Media Foundation en Windows Vista Gold, SP1, y SP2 y Server 2008; permite a atacantes remotos ejecutar código a su ele... • http://www.us-cert.gov/cas/techalerts/TA09-251A.html • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 10.0EPSS: 41%CPEs: 53EXPL: 0CVE-2008-3009
https://notcve.org/view.php?id=CVE-2008-3009
10 Dec 2008 — Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka "SPN Vulnerability." Microsoft Windows Media Player v6.4, Windows Media Format Runtime v7.1 a v11, y Windows Media Services v4.1, v9, y 2008 no usan apropiadamen... • http://secunia.com/advisories/33058 • CWE-255: Credentials Management Errors •
CVSS: 9.3EPSS: 69%CPEs: 29EXPL: 0CVE-2007-0064
https://notcve.org/view.php?id=CVE-2007-0064
12 Dec 2007 — Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file. Desbordamiento de búfer en la región heap de la memoria en Windows Media Format Runtime versiones 7.1, 9, 9.5, 9.5 x64 Edition, versión 11, y Windows Media Services versión 9.1 para Microsoft Windows 2000, XP, Server 20... • http://secunia.com/advisories/28034 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 27%CPEs: 1EXPL: 0CVE-2003-0905
https://notcve.org/view.php?id=CVE-2003-0905
15 Apr 2004 — Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of service (disallowing new connections) via a certain sequence of TCP/IP packets. Vulnerabilidad desconocida en los componentes Windows Media Station Service y Windows Media Monitor Service de Windows Media Services 4.1 permite a atacantes remotos causar una denegación de servicio (impidiendo nuevas conexiones) mediante ciertas secuencia... • http://www.kb.cert.org/vuls/id/982630 •
CVSS: 7.5EPSS: 19%CPEs: 2EXPL: 0CVE-2001-0083
https://notcve.org/view.php?id=CVE-2001-0083
12 Feb 2001 — Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memory leak that allows remote attackers to cause a denial of service via a series of severed connections, aka the "Severed Windows Media Server Connection" vulnerability. • http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ281256 •
CVSS: 5.9EPSS: 9%CPEs: 2EXPL: 0CVE-2000-0849
https://notcve.org/view.php?id=CVE-2000-0849
14 Nov 2000 — Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicast Service Race Condition" vulnerability. • http://www.securityfocus.com/bid/1655 •
CVSS: 6.5EPSS: 17%CPEs: 2EXPL: 1CVE-2000-0495 – Microsoft Windows Media Services 4.0/4.1 - Denial of Service (MS00-038)
https://notcve.org/view.php?id=CVE-2000-0495
30 May 2000 — Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request" vulnerability. • https://www.exploit-db.com/exploits/19974 •
CVSS: 7.5EPSS: 26%CPEs: 2EXPL: 1CVE-2000-0211 – Microsoft Windows Media Services 4.0/4.1 - Handshake Sequence Denial of Service
https://notcve.org/view.php?id=CVE-2000-0211
23 Feb 2000 — The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability. • https://www.exploit-db.com/exploits/19759 •