CVE-2009-2499: Code Injection
Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory Corruption Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2499?
CVE-2009-2499 has a severity rating of critical due to its potential for remote code execution.
How do I fix CVE-2009-2499?
To mitigate CVE-2009-2499, install the latest security updates provided by Microsoft.
What software is affected by CVE-2009-2499?
CVE-2009-2499 affects Microsoft Windows Media Format Runtime 9.0, 9.5, 11 and Microsoft Media Foundation on certain versions of Windows.
Can CVE-2009-2499 be exploited through malicious MP3 files?
Yes, CVE-2009-2499 can be exploited by attackers through crafted MP3 files containing malicious metadata.
Which Windows versions are impacted by CVE-2009-2499?
CVE-2009-2499 impacts Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 across various service packs.