Login Request a demo
Unscored severity · published Dec 29, 2008
CVE-2008-5745
Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a…
–
CVSS
21.4%
EPSS
No
On KEV
Description
Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this has been incorrectly reported as a code-execution vulnerability. NOTE: it is not clear whether this issue is related to CVE-2008-4927.
Exploitation
Is it being used?
Exploit prediction (EPSS)21.4% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WM
Windows Media Player · Microsoft
9; 10; 11 · source: NVD
Affected product
WM
Windows Media Player
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5745
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5745
securityreason.com
http://securityreason.com/securityalert/4823
www.securityfocus.com
http://www.securityfocus.com/archive/1/499579/100/0/threaded
Exploit
http://www.securityfocus.com/bid/33018
www.securitytracker.com
http://www.securitytracker.com/id?1021495
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/47664
www.exploit-db.com
https://www.exploit-db.com/exploits/7585
More from Windows Media Player
7.8
CVE-2002-1844
Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the…
2.5
CVE-2017-11768
Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows…
–
CVE-2015-1728
Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows Media Player RCE via DataObject…
–
CVE-2014-2671
Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a…
–
CVE-2013-3127
The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player…