CVE-2009-3201: Rob Schultz Media Player Classic

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Integer overflow in Media Player Classic 6.4.9 allows user-assisted remote attackers to cause a denial of service (application crash) via a MIDI file (.mid) with a malformed header, which triggers a buffer overflow, a different vulnerability than CVE-2007-4940.

Affected products

• Rob Schultz Media Player Classic: version 6.4.9 only

Published 2009-09-15. Last modified 2026-06-16.