CVE-2009-4311
high · 9.3Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media content, as reported to Microsoft by Paul Byrne of NGS Software. NOTE: this might overlap CVE-2008-3615.
9.3
CVSS
21.9%
EPSS (exploit prob.)
98th
EPSS percentile
2009-12-13
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_2000 | all versions |
| microsoft | windows_2003_server | all versions |
| microsoft | windows_2003_server | all versions |
| microsoft | windows_2003_server | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/37592
- http://securitytracker.com/id?1023302
- http://support.microsoft.com/kb/954157
- http://support.microsoft.com/kb/955759
- http://support.microsoft.com/kb/976138
- http://www.microsoft.com/technet/security/advisory/954157.mspx
- http://www.securityfocus.com/bid/37251
- http://www.vupen.com/english/advisories/2009/3440
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54645
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11975
- http://secunia.com/advisories/37592
- http://securitytracker.com/id?1023302
- http://support.microsoft.com/kb/954157
- http://support.microsoft.com/kb/955759
- http://support.microsoft.com/kb/976138
- http://www.microsoft.com/technet/security/advisory/954157.mspx
- http://www.securityfocus.com/bid/37251
- http://www.vupen.com/english/advisories/2009/3440
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54645
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11975
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2009-4311