CVE

Id
41748  
CVE No.
CVE-2009-4313  
Status
Candidate  
Description
ir32_32.dll 3.24.15.3 in the Indeo32 codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (heap corruption) or execute arbitrary code via malformed data in a stream in a media file, as demonstrated by an AVI file.  
Phase
Assigned (20091212)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
458205 41748 CVE-2009-4313 IDEFENSE:20091208 Microsoft Windows Indeo32 Codec Parsing Heap Corruption Vulnerability  View
458206 41748 CVE-2009-4313 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=835  View
458207 41748 CVE-2009-4313 CONFIRM:http://www.microsoft.com/technet/security/advisory/954157.mspx  View
458208 41748 CVE-2009-4313 MSKB:954157  View
458209 41748 CVE-2009-4313 URL:http://support.microsoft.com/kb/954157  View
458210 41748 CVE-2009-4313 MSKB:955759  View
458211 41748 CVE-2009-4313 URL:http://support.microsoft.com/kb/955759  View
458212 41748 CVE-2009-4313 MSKB:976138  View
458213 41748 CVE-2009-4313 URL:http://support.microsoft.com/kb/976138  View
458214 41748 CVE-2009-4313 BID:37251  View
458215 41748 CVE-2009-4313 URL:http://www.securityfocus.com/bid/37251  View
458216 41748 CVE-2009-4313 OSVDB:60858  View
458217 41748 CVE-2009-4313 URL:http://www.osvdb.org/60858  View
458218 41748 CVE-2009-4313 OVAL:oval:org.mitre.oval:def:12242  View
458219 41748 CVE-2009-4313 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12242  View
458220 41748 CVE-2009-4313 SECTRACK:1023302  View
458221 41748 CVE-2009-4313 URL:http://securitytracker.com/id?1023302  View
458222 41748 CVE-2009-4313 SECUNIA:37592  View
458223 41748 CVE-2009-4313 URL:http://secunia.com/advisories/37592  View
458224 41748 CVE-2009-4313 VUPEN:ADV-2009-3440  View
458225 41748 CVE-2009-4313 URL:http://www.vupen.com/english/advisories/2009/3440  View
458226 41748 CVE-2009-4313 XF:ms-ie-content-code-execution(54645)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45528 JVNDB-2009-006535 ScriptsEz Ez Cart の index.php におけるクロスサイトスクリプティングの脆弱性 ScriptsEz Ez Cart の index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4317 41748 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006535.html  View