PT-2009-6433 · Intel+1 · Intel Indeo41 Codec+1

Published 2009-12-13 · Updated 2018-10-10 · CVE-2009-4309

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Media Player versions in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2

Description A heap-based buffer overflow issue exists in the Intel Indeo41 codec for Windows Media Player, allowing remote attackers to execute arbitrary code via a large size value in a movi record in an IV41 stream in a media file. This can be demonstrated by an AVI file.

Recommendations For Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, consider disabling the Intel Indeo41 codec until a patch is available. Restrict access to media files from untrusted sources to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-4309

Affected Products

Intel Indeo41 Codec

Windows Media Player

References · 15

• http://vupen.com/english/advisories/2009/3440 · Vendor Advisory
• http://support.microsoft.com/kb/955759 · Vendor Advisory
• http://secunia.com/advisories/37592 · Vendor Advisory
• http://securitytracker.com/id?1023302 · Patch
• http://support.microsoft.com/kb/976138 · Vendor Advisory
• http://support.microsoft.com/kb/954157 · Vendor Advisory
• http://microsoft.com/technet/security/advisory/954157.mspx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4309 · Security Note
• http://osvdb.org/60855 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12188 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54645 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54642 · Note
• http://zerodayinitiative.com/advisories/ZDI-09-089 · Note
• http://securityfocus.com/bid/37251 · Note
• http://securityfocus.com/archive/1/508324/100/0/threaded · Note