Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory Corruption Vulnerability."

The remote Windows host contains a version of the Windows Media Format Runtime that is affected by multiple issues : 

  - The ASF parser has an invalid free vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted ASF file, which could lead to arbitrary code execution.  (CVE-2009-2498)

  - The MP3 parser has a memory corruption vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted MP3 file, which could lead to arbitrary code execution.  (CVE-2009-2499)

The remote Windows host contains a version of the Windows Media Format Runtime that is affected by multiple issues : 

  - The ASF parser has an invalid free vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted ASF file, which could lead to arbitrary code execution.  (CVE-2009-2498)

  - The MP3 parser has a memory corruption vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted MP3 file, which could lead to arbitrary code execution.  (CVE-2009-2499)

Note that this patch is not available for unsupported Service Packs.

The remote Windows host contains a version of the Windows Media Format Runtime that is affected by multiple issues : 

  - The ASF parser has an invalid free vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted ASF file, which could lead to arbitrary code execution.  (CVE-2009-2498)

  - The MP3 parser has a memory corruption vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted MP3 file, which could lead to arbitrary code execution.  (CVE-2009-2499)

Note, that this patch is not available for unsupported Service Packs.

The remote host is running a version of Windows Media Services that is potentially affected by a remote code execution vulnerability when processing specially crafted media files.

The remote Windows host contains a version of the Windows Media Format Runtime or Windows Media Services that is affected by multiple vulnerabilities :

  - The ASF parser has an invalid free vulnerability.
    A remote attacker could exploit this by tricking a     user into opening a specially crafted ASF file, which     could lead to arbitrary code execution. (CVE-2009-2498)

  - The MP3 parser has a memory corruption vulnerability.
    A remote attacker could exploit this by tricking a     user into opening a specially crafted MP3 file, which     could lead to arbitrary code execution. (CVE-2009-2499)

ID	Name	Product	Family	Severity
5167	MS09-047: Windows Media Format Multiple Vulnerabilities (Windows Vista / Server 2008)	Nessus Network Monitor	Generic	medium
5166	MS09-047: Windows Media Format Multiple Vulnerabilities (Windows XP 64-bit)	Nessus Network Monitor	Generic	medium
5165	MS09-047: Windows Media Format Multiple Vulnerabilities (Windows XP 32-bit)	Nessus Network Monitor	Generic	medium
5164	MS09-047: Windows Media Format Multiple Vulnerabilities (Windows Server 2003)	Nessus Network Monitor	Generic	medium
5163	MS09-047: Windows Media Format Multiple Vulnerabilities (Windows 2000)	Nessus Network Monitor	Generic	medium
5153	Windows Media Services RCE (MS09-047)	Nessus Network Monitor	Generic	medium
40890	MS09-047: Vulnerabilities in Windows Media Format Could Allow Remote Code Execution (973812)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2009-2499

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

high