PT-2009-6435 · Intel+1 · Indeo Codec+1

Publicado 2009-12-13 · Atualizado 2017-09-19 · CVE-2009-4311

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue allows remote attackers to execute arbitrary code via crafted media content. This is related to an unspecified vulnerability in the Indeo codec.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2009-4311

Produtos afetados

Indeo Codec

Windows

Referências · 11

• http://vupen.com/english/advisories/2009/3440 · Aviso do Fabricante
• http://support.microsoft.com/kb/955759 · Aviso do Fabricante
• http://secunia.com/advisories/37592 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-4311 · Nota de Segurança
• http://support.microsoft.com/kb/976138 · Aviso do Fabricante
• http://securitytracker.com/id?1023302 · Nota
• http://support.microsoft.com/kb/954157 · Aviso do Fabricante
• http://microsoft.com/technet/security/advisory/954157.mspx · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54645 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11975 · Nota
• http://securityfocus.com/bid/37251 · Nota