Microsoft Windows Media Format Runtime vulnerabilities

8 CVEs affecting Microsoft Windows Media Format Runtime, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3127, published 2013-07-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-0064, published 2007-12-12. High severity, CVSS 9.3. EPSS: 36% chance of exploitation in the next 30 days. Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted…
CVE-2009-0555, published 2009-10-14. High severity, CVSS 9.3. EPSS: 27.1% chance of exploitation in the next 30 days. Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly process Advanced Systems Format (ASF)…
CVE-2009-2525, published 2009-10-14. High severity, CVSS 9.3. EPSS: 23.3% chance of exploitation in the next 30 days. Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly initialize unspecified functions…
CVE-2013-3127, published 2013-07-10. High severity, CVSS 9.3. EPSS: 21.9% chance of exploitation in the next 30 days. The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows…
CVE-2009-2498, published 2009-09-08. High severity, CVSS 9.3. EPSS: 21.2% chance of exploitation in the next 30 days. Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote…
CVE-2010-1879, published 2010-06-08. High severity, CVSS 9.3. EPSS: 20.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary…
CVE-2008-3009, published 2008-12-10. High severity, CVSS 10.0. EPSS: 15.8% chance of exploitation in the next 30 days. Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when…
CVE-2009-2499, published 2009-09-08. High severity, CVSS 8.5. EPSS: 15.5% chance of exploitation in the next 30 days. Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an…