CVE-2009-2498
- EPSS 21.21%
- Veröffentlicht 08.09.2009 22:30:00
- Zuletzt bearbeitet 16.06.2026 23:09:35
Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) ...
CVE-2009-2499
- EPSS 15.55%
- Veröffentlicht 08.09.2009 22:30:00
- Zuletzt bearbeitet 16.06.2026 23:09:35
Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory ...
- EPSS 15.83%
- Veröffentlicht 10.12.2008 14:00:00
- Zuletzt bearbeitet 16.06.2026 22:54:55
Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which all...
CVE-2007-0064
- EPSS 35.98%
- Veröffentlicht 12.12.2007 00:46:00
- Zuletzt bearbeitet 16.06.2026 22:34:50
Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a c...
- EPSS 25.82%
- Veröffentlicht 15.04.2004 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:03:09
Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of service (disallowing new connections) via a certain sequence of TCP/IP pack...
- EPSS 17.34%
- Veröffentlicht 12.02.2001 05:00:00
- Zuletzt bearbeitet 16.06.2026 21:53:37
Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memory leak that allows remote attackers to cause a denial of service via a series of severed connections, aka the ...
CVE-2000-0849
- EPSS 14.98%
- Veröffentlicht 14.11.2000 05:00:00
- Zuletzt bearbeitet 16.06.2026 21:52:35
Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicast Service Race Condition" vulnerability.
- EPSS 32.34%
- Veröffentlicht 30.05.2000 04:00:00
- Zuletzt bearbeitet 16.06.2026 21:51:51
Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request" vulnerability.
- EPSS 21.33%
- Veröffentlicht 23.02.2000 05:00:00
- Zuletzt bearbeitet 16.06.2026 21:51:14
The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability.