CVE-2009-1331: Microsoft Windows Media Player

High severity, CVSS 9.3. EPSS: 18.1% chance of exploitation in the next 30 days.

Integer overflow in Microsoft Windows Media Player (WMP) 11.0.5721.5260 allows remote attackers to cause a denial of service (application crash) via a crafted .mid file, as demonstrated by crash.mid.

Affected products

• Microsoft Windows Media Player: version 11.0.5721.5260 only

Published 2009-04-17. Last modified 2026-06-16.