リモートのWindowsホストに含まれるWindows Media Format RuntimeまたはWindows Media Servicesのバージョンは、複数の脆弱性の影響を受けます。

  - ASFパーサーに無効な解放の脆弱性があります。
    リモートの攻撃者は、これを悪用してユーザーを騙し、特別に細工されたASFファイルを開かせることで、任意のコードを実行する可能性があります。（CVE-2009-2498）

  - MP3パーサーにメモリ破損の脆弱性があります。
    リモートの攻撃者は、これを悪用してユーザーを騙し、特別に細工されたMP3ファイルを開かせることで、任意のコードを実行する可能性があります。（CVE-2009-2499）

远程 Windows 主机包含的 Windows Media Format Runtime 或 Windows Media Services 版本受到多个漏洞的影响：

  - ASF 分析器存在一个无效释放漏洞。
    远程攻击者可利用此漏洞，通过诱骗用户打开特别构建的 ASF 文件来执行任意代码。(CVE-2009-2498)

  - MP3 分析程序存在一个内存损坏漏洞。
    远程攻击者可利用此漏洞，通过诱骗用户打开特别构建的 MP3 文件来执行任意代码。(CVE-2009-2499)

The remote Windows host contains a version of the Windows Media Format Runtime or Windows Media Services that is affected by multiple vulnerabilities :

  - The ASF parser has an invalid free vulnerability.
    A remote attacker could exploit this by tricking a     user into opening a specially crafted ASF file, which     could lead to arbitrary code execution. (CVE-2009-2498)

  - The MP3 parser has a memory corruption vulnerability.
    A remote attacker could exploit this by tricking a     user into opening a specially crafted MP3 file, which     could lead to arbitrary code execution. (CVE-2009-2499)

遠端 Windows 主機上的 Windows Media Format Runtime 或 Windows Media Services 版本受到多個弱點影響：

  - ASF 剖析器有一個無效釋放弱點。
    遠端攻擊者可惡意利用此弱點，誘騙使用者開啟特製的 ASF 檔案，進而導致任意程式碼執行。(CVE-2009-2498)

  - MP3 剖析器有一個記憶體損毀弱點。
    遠端攻擊者可惡意利用此弱點，誘騙使用者開啟特製的 MP3 檔案，進而導致任意程式碼執行。(CVE-2009-2499)

The remote host is running a version of Windows Media Services that is potentially affected by a remote code execution vulnerability when processing specially crafted media files.

The remote Windows host contains a version of the Windows Media Format Runtime that is affected by multiple issues : 

  - The ASF parser has an invalid free vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted ASF file, which could lead to arbitrary code execution.  (CVE-2009-2498)

  - The MP3 parser has a memory corruption vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted MP3 file, which could lead to arbitrary code execution.  (CVE-2009-2499)

Note that this patch is not available for unsupported Service Packs.

The remote Windows host contains a version of the Windows Media Format Runtime that is affected by multiple issues : 

  - The ASF parser has an invalid free vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted ASF file, which could lead to arbitrary code execution.  (CVE-2009-2498)

  - The MP3 parser has a memory corruption vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted MP3 file, which could lead to arbitrary code execution.  (CVE-2009-2499)

Note, that this patch is not available for unsupported Service Packs.

The remote Windows host contains a version of the Windows Media Format Runtime that is affected by multiple issues : 

  - The ASF parser has an invalid free vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted ASF file, which could lead to arbitrary code execution.  (CVE-2009-2498)

  - The MP3 parser has a memory corruption vulnerability.  A remote attacker could exploit this by tricking a user into opening a specially crafted MP3 file, which could lead to arbitrary code execution.  (CVE-2009-2499)

ID	Name	Product	Family	Published	Updated	Severity
40890	MS09-047: Windows Media Formatの複数の脆弱性により、リモートコードが実行される可能性があります（973812）	Nessus	Windows : Microsoft Bulletins	9/8/2009	8/5/2020	high
40890	MS09-047: Windows Media Format 中的漏洞可允许远程代码执行 (973812)	Nessus	Windows : Microsoft Bulletins	9/8/2009	8/5/2020	high
40890	MS09-047: Vulnerabilities in Windows Media Format Could Allow Remote Code Execution (973812)	Nessus	Windows : Microsoft Bulletins	9/8/2009	8/5/2020	high
40890	MS09-047: Windows Media Format 中的弱點可導致遠端程式碼執行 (973812)	Nessus	Windows : Microsoft Bulletins	9/8/2009	8/5/2020	high
5153	Windows Media Services RCE (MS09-047)	Nessus Network Monitor	Generic	9/8/2009	3/6/2019	medium
5164	MS09-047: Windows Media Format Multiple Vulnerabilities (Windows Server 2003)	Nessus Network Monitor	Generic	9/11/2009	3/6/2019	medium
5165	MS09-047: Windows Media Format Multiple Vulnerabilities (Windows XP 32-bit)	Nessus Network Monitor	Generic	9/11/2009	3/6/2019	medium
5166	MS09-047: Windows Media Format Multiple Vulnerabilities (Windows XP 64-bit)	Nessus Network Monitor	Generic	9/11/2009	3/6/2019	medium
5163	MS09-047: Windows Media Format Multiple Vulnerabilities (Windows 2000)	Nessus Network Monitor	Generic	9/11/2009	3/6/2019	medium
5167	MS09-047: Windows Media Format Multiple Vulnerabilities (Windows Vista / Server 2008)	Nessus Network Monitor	Generic	9/11/2009	3/6/2019	medium

Detections

Analytics

Plugins Search

high

high

high

high

medium

medium

medium

medium

medium

medium