CVE-2005-2128: Microsoft Windows Media Player

Medium severity, CVSS 5.0. EPSS: 40.5% chance of exploitation in the next 30 days.

QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value.

Affected products

• Microsoft Windows Media Player: version 9 only

Published 2005-10-12. Last modified 2026-06-16.