Microsoft Windows Media Services vulnerabilities

9 CVEs affecting Microsoft Windows Media Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-2499, published 2009-09-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-0064, published 2007-12-12. High severity, CVSS 9.3. EPSS: 36% chance of exploitation in the next 30 days. Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted…
CVE-2000-0495, published 2000-05-30. Medium severity, CVSS 5.0. EPSS: 32.3% chance of exploitation in the next 30 days. Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request" vulnerability.
CVE-2003-0905, published 2004-04-15. Medium severity, CVSS 5.0. EPSS: 25.8% chance of exploitation in the next 30 days. Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of service (disallowing new…
CVE-2000-0211, published 2000-02-23. Medium severity, CVSS 5.0. EPSS: 21.3% chance of exploitation in the next 30 days. The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media…
CVE-2009-2498, published 2009-09-08. High severity, CVSS 9.3. EPSS: 21.2% chance of exploitation in the next 30 days. Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote…
CVE-2001-0083, published 2001-02-12. Medium severity, CVSS 5.0. EPSS: 17.3% chance of exploitation in the next 30 days. Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memory leak that allows remote attackers to cause a denial of…
CVE-2008-3009, published 2008-12-10. High severity, CVSS 10.0. EPSS: 15.8% chance of exploitation in the next 30 days. Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when…
CVE-2009-2499, published 2009-09-08. High severity, CVSS 8.5. EPSS: 15.5% chance of exploitation in the next 30 days. Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an…
CVE-2000-0849, published 2000-11-14. Low severity, CVSS 2.6. EPSS: 15% chance of exploitation in the next 30 days. Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicast Service Race…