CVE-2008-5745: Microsoft Windows Media Player

Medium severity, CVSS 4.3. EPSS: 21.4% chance of exploitation in the next 30 days.

Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this has been incorrectly reported as a code-execution vulnerability. NOTE: it is not clear whether this issue is related to CVE-2008-4927.

Affected products

• Microsoft Windows Media Player: version 9 only; version 10 only; version 11 only

Published 2008-12-29. Last modified 2026-06-16.