Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2000-0495

4 documents4 sources

Severity

5.0MEDIUM

EPSS

17.3%

top 4.95%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Microsoft Windows Media Services

Timeline

PublishedMay 30

Latest updateApr 30

Description

Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request" vulnerability.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDmicrosoft/windows_media_services4.0, 4.1+1

🔴Vulnerability Details

GHSA

GHSA-jrv6-w97f-q9vv: Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder↗2022-04-30

▶

CVEList

CVE-2000-0495: Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder↗2000-10-13

▶

💥Exploits & PoCs

Exploit-DB

Microsoft Windows Media Services 4.0/4.1 - Denial of Service (MS00-038)↗2000-05-31

▶