CVE-2008-4927

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.3MEDIUM
EPSS
25.9%
top 3.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Windows Media Player
Timeline
PublishedNov 4
Latest updateMay 17

Description

Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted attackers to cause a denial of service (application crash) via a malformed (1) MIDI or (2) DAT file, related to "MThd Header Parsing." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-cr3v-px7w-5w96: Microsoft Windows Media Player (WMP) 9↗2022-05-17
▶
CVEList
CVE-2008-4927: Microsoft Windows Media Player (WMP) 9↗2008-11-04
▶
CVE-2008-4927 (MEDIUM CVSS 4.3) | Microsoft Windows Media Player (WMP | cvebase.io