CVE-2013-3127: Microsoft Windows Media Format Runtime

High severity, CVSS 9.3. EPSS: 21.9% chance of exploitation in the next 30 days.

The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execute arbitrary code via a crafted media file, aka "WMV Video Decoder Remote Code Execution Vulnerability."

Affected products

• Microsoft Windows Media Format Runtime: version 9 only; version 9.5 only; version 11 only
• Microsoft Windows Media Player: version 11 only; version 12 only

Published 2013-07-10. Last modified 2026-06-16.