CVE-2009-4210: Code Injection

Published Dec 13, 2009

Updated

The Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted media content.

Affected Software

7 affected components

Microsoft Windows 2003 Server=sp2

Microsoft Windows XP=sp2

Microsoft Windows 2000=sp4

Microsoft Windows XP=sp3

Microsoft Windows XP=sp2

Microsoft Windows 2003 Server=sp2

Remediation

Patch Available

http://support.microsoft.com/kb/976138

Event History

Dec 13, 2009

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2009-4210?

CVE-2009-4210 has a high severity level due to its potential for causing denial of service through memory corruption.

How do I fix CVE-2009-4210?

To fix CVE-2009-4210, it is recommended to install the latest security updates provided by Microsoft for the affected operating systems.

What systems are affected by CVE-2009-4210?

CVE-2009-4210 affects Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2.

What impact can CVE-2009-4210 have on systems?

CVE-2009-4210 can lead to memory corruption, causing potential denial of service or other unspecified impacts.

Can CVE-2009-4210 be exploited remotely?

Yes, CVE-2009-4210 can be exploited remotely through crafted media content to trigger the vulnerability.