CVE-2009-4313
- State
- Published
- Severity
- Not scored
- Published
- Dec 13, 2009
- Updated
- Aug 7, 2024
- Reserved
- Dec 12, 2009
Description
ir32_32.dll 3.24.15.3 in the Indeo32 codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (heap corruption) or execute arbitrary code via malformed data in a stream in a media file, as demonstrated by an AVI file.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 955759vendor-advisory
- 60858vdb-entry
- 1023302vdb-entry
- 37251vdb-entry
- oval:org.mitre.oval:def:12242vdb-entrysignature
- http://www.microsoft.com/technet/security/advisory/954157.mspx
- 976138vendor-advisory
- ADV-2009-3440vdb-entry
- 954157vendor-advisory
- 20091208 Microsoft Windows Indeo32 Codec Parsing Heap Corruption Vulnerabilitythird-party-advisory
- ms-ie-content-code-execution(54645)vdb-entry
- 37592third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.