CVE-2009-4312: Code Injection
Published Dec 13, 2009
·Updated
Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media content, as reported to Microsoft by Dave Lenoe of Adobe.
Affected Software
7 affected components
Microsoft Windows 2003 Server=sp2
Microsoft Windows XP=sp2
Microsoft Windows 2000=sp4
Microsoft Windows XP=sp3
Microsoft Windows XP=sp2
Microsoft Windows 2003 Server=sp2
Microsoft Windows 2003 Server=sp2
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 13, 2009
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4312?
CVE-2009-4312 is considered a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2009-4312?
To address CVE-2009-4312, users should apply the relevant security updates provided by Microsoft for affected versions.
3
What platforms are affected by CVE-2009-4312?
CVE-2009-4312 affects Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2.
4
What type of attacks does CVE-2009-4312 enable?
CVE-2009-4312 enables remote attackers to execute arbitrary code through specially crafted media content.
5
Who reported CVE-2009-4312 to Microsoft?
CVE-2009-4312 was reported to Microsoft by Dave Lenoe of Adobe.