CVE-2007-0064 Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted....
HighCVSS 9.3
EPSS 36.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows media format runtime | = 7.1 | No fix listed |
| Microsoft windows media format runtime | = 9 | No fix listed |
| Microsoft windows media format runtime | = 9.5 | No fix listed |
| Microsoft windows media format runtime | = 11 | No fix listed |
| Microsoft windows media services | = 9.1 | No fix listed |
References
- 28034 third-party-advisory vendor-advisory
- VU#319385 third-party-advisory us-government-resource
- SSRT071506 vendor-advisory
- 26776 vdb-entry
- 1019074 vdb-entry
- TA07-345A third-party-advisory us-government-resource
- ADV-2007-4183 vdb-entry vendor-advisory
- MS07-068 vendor-advisory
- oval:org.mitre.oval:def:3622 signature vdb-entry