PT-2009-6434 · Microsoft+1 · Windows 2000+4

Published 2009-12-13 · Updated 2018-10-10 · CVE-2009-4310

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Media Player versions in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2

Description The issue is a stack-based buffer overflow in the Intel Indeo41 codec, which allows remote attackers to execute arbitrary code via crafted compressed video data in an IV41 stream in a media file. This can lead to many loop iterations, as demonstrated by data in an AVI file.

Recommendations For Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, consider disabling the Intel Indeo41 codec until a patch is available to prevent exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-4310

Affected Products

Intel Indeo41 Codec

Windows 2000

Windows Server 2003

Windows Xp

Windows Media Player

References · 15

• http://vupen.com/english/advisories/2009/3440 · Vendor Advisory
• http://support.microsoft.com/kb/955759 · Vendor Advisory
• http://secunia.com/advisories/37592 · Vendor Advisory
• http://securitytracker.com/id?1023302 · Patch
• http://support.microsoft.com/kb/976138 · Vendor Advisory
• http://support.microsoft.com/kb/954157 · Vendor Advisory
• http://microsoft.com/technet/security/advisory/954157.mspx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4310 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11596 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54645 · Note
• http://securityfocus.com/archive/1/508335/100/0/threaded · Note
• http://securityfocus.com/bid/37251 · Note
• http://osvdb.org/60856 · Note
• http://zerodayinitiative.com/advisories/ZDI-09-090 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54643 · Note