NVD

Id
51432  
Name
CVE-2009-4309  
Description
Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a large size value in a movi record in an IV41 stream in a media file, as demonstrated by an AVI file.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-12-12  
Modified Date
2011-07-18  
Seq
2009-4309  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
260887 51432 CVE-2009-4309 oval:org.mitre.oval:def:12188  View
260888 51432 CVE-2009-4309 1023302  View
260889 51432 CVE-2009-4309 954157  View
260890 51432 CVE-2009-4309 955759  View
260891 51432 CVE-2009-4309 976138  View
260892 51432 CVE-2009-4309 http://www.microsoft.com/technet/security/advisory/954157.mspx  View
260893 51432 CVE-2009-4309 20091208 ZDI-09-089: Microsoft Windows Intel Indeo Codec Parsing Heap Overflow Vulnerability  View
260894 51432 CVE-2009-4309 37251  View
260895 51432 CVE-2009-4309 ADV-2009-3440  View
260896 51432 CVE-2009-4309 ms-ie-indeo41-bo(54642)  View
260897 51432 CVE-2009-4309 ms-ie-content-code-execution(54645)  View
260898 51432 CVE-2009-4309 http://zerodayinitiative.com/advisories/ZDI-09-089/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41434 JVNDB-2009-002441 Microsoft Windows の Windows Media Player 用の Intel Indeo41 コーデックにおけるヒープベースのバッファオーバーフローの脆弱性 Microsoft Windows の Windows Media Player 用の Intel Indeo41 コーデックには、任意のコードを実行される脆弱性が存在します。 CVE-2009-4309 41740 CVE-2009-4309 51432 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002441.html 2009-12-08 2010-01-25 View