CVE-2008-5745: Integer Overflow
Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this has been incorrectly reported as a code-execution vulnerability. NOTE: it is not clear whether this issue is related to CVE-2008-4927.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5745?
CVE-2008-5745 has a high severity rating due to its potential to cause denial of service by crashing the application.
How do I fix CVE-2008-5745?
To fix CVE-2008-5745, users should update to the latest version of Microsoft Windows Media Player that addresses this vulnerability.
What versions of Windows Media Player are affected by CVE-2008-5745?
CVE-2008-5745 affects Microsoft Windows Media Player versions 9, 10, and 11.
Can CVE-2008-5745 be exploited remotely?
Yes, CVE-2008-5745 can be exploited remotely through specially crafted audio files.
What file types can trigger the vulnerability CVE-2008-5745?
The vulnerability CVE-2008-5745 can be triggered by crafted WAV, SND, or MID files.