CVE-2008-4927
published 2008-11-04CVE-2008-4927: Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted attackers to cause a denial of service (application crash) via a malformed (1) MIDI or…
PriorityP415medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
4.03%
89.4th percentile
Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted attackers to cause a denial of service (application crash) via a malformed (1) MIDI or (2) DAT file, related to "MThd Header Parsing." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_media_player | — | — |
| microsoft | windows_media_player | — | — |
| microsoft | windows_media_player | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-cr3v-px7w-5w96: Microsoft Windows Media Player (WMP) 9
ghsa_unreviewed·2022-05-17
CVE-2008-4927 [MEDIUM] CWE-20 GHSA-cr3v-px7w-5w96: Microsoft Windows Media Player (WMP) 9
Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted attackers to cause a denial of service (application crash) via a malformed (1) MIDI or (2) DAT file, related to "MThd Header Parsing." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
GHSA
GHSA-vhq2-p9cv-x883: Integer overflow in quartz
ghsa_unreviewed·2022-05-14·CVSS 4.3
CVE-2008-5745 [MEDIUM] GHSA-vhq2-p9cv-x883: Integer overflow in quartz
Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this has been incorrectly reported as a code-execution vulnerability. NOTE: it is not clear whether this issue is related to CVE-2008-4927.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2008-11-04
Published