Unscored severity · published Dec 12, 2007
CVE-2007-0064
Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista…
–
CVSS
36%
EPSS
No
On KEV
Description
Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
Exploitation
Is it being used?
Exploit prediction (EPSS)36.0% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WM
Windows Media Format Runtime · Microsoft
7.1; 9; 9.5; 9.5; 11 · source: NVD
WM
Windows Media Services · Microsoft
9.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0064
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0064
Vendor Advisory
http://secunia.com/advisories/28034
US Government Resource
http://www.kb.cert.org/vuls/id/319385
www.securityfocus.com
http://www.securityfocus.com/archive/1/485268/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/26776
www.securitytracker.com
http://www.securitytracker.com/id?1019074
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA07-345A.html
More from Windows Media Format Runtime
–
CVE-2013-3127
The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player…
–
CVE-2010-1879
Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to…
–
CVE-2009-2525
Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly initialize…
–
CVE-2009-0555
Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly process Advanced…
–
CVE-2009-2499
Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute…