Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*

part: a version: 9.5 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductWindows Media Format Runtime (d8f9a33b-d2d1-530f-9dff-02d871f22562)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-3127 vulnerable 2026-06-08 05:04:30.168454 Details available
The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execute arbitrary code via a crafted media file, aka "WMV Video Decoder Remote Code Execution Vulnerability."
Published: 2013-07-10T01:00:00.000Z
Updated: 2024-08-06T16:00:09.801Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1879 vulnerable 2026-06-08 04:54:10.879783 Details available
Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "Media Decompression Vulnerability."
Published: 2010-06-08T22:00:00.000Z
Updated: 2024-08-07T01:35:53.791Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2525 vulnerable 2026-06-08 04:51:29.050702 Details available
Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly initialize unspecified functions within compressed audio files, which allows remote attackers to execute arbitrary code via (1) a crafted media file or (2) crafted streaming content, aka "Windows Media Runtime Heap Corruption Vulnerability."
Published: 2009-10-14T10:00:00.000Z
Updated: 2024-08-07T05:52:14.950Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2499 vulnerable 2026-06-08 04:51:28.961662 Details available
Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory Corruption Vulnerability."
Published: 2009-09-08T22:00:00.000Z
Updated: 2024-08-07T05:52:14.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2498 vulnerable 2026-06-08 04:51:28.955869 Details available
Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka "Windows Media Header Parsing Invalid Free Vulnerability."
Published: 2009-09-08T22:00:00.000Z
Updated: 2024-08-07T05:52:14.607Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0555 vulnerable 2026-06-08 04:51:09.945592 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3009 vulnerable 2026-06-08 04:50:32.832660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0064 vulnerable 2026-06-08 04:49:31.350801 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.