Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:windows_media_services:9.1:*:*:*:*:*:*:*

part: a version: 9.1 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductWindows Media Services (c8449bd1-b7cf-54c5-ae2d-5c05d9a09606)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2499 vulnerable 2026-06-08 04:51:28.961916 Details available
Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory Corruption Vulnerability."
Published: 2009-09-08T22:00:00.000Z
Updated: 2024-08-07T05:52:14.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2498 vulnerable 2026-06-08 04:51:28.959293 Details available
Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka "Windows Media Header Parsing Invalid Free Vulnerability."
Published: 2009-09-08T22:00:00.000Z
Updated: 2024-08-07T05:52:14.607Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0064 vulnerable 2026-06-08 04:49:31.353047 Details available
Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
Published: 2007-12-12T00:00:00.000Z
Updated: 2024-08-07T12:03:37.104Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.