CVE-2007-0064: Microsoft Windows Media Format Runtime

High severity, CVSS 9.3. EPSS: 36% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.

Affected products

• Microsoft Windows Media Format Runtime: version 7.1 only; version 9 only; version 9.5 only; version 11 only
• Microsoft Windows Media Services: version 9.1 only

Published 2007-12-12. Last modified 2026-06-16.