PatchTheCVEmedia player vulnerabilities and fixes
Recent CVEs affecting media player, with upgrade or downgrade steps. 4 tracked.
Also searched as: mediaplayer.
media player has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-12-13. Highest priority: CVE-2009-4310 (score 62/100).
- CVE-2009-4310 HIGH 9.3 MITIGATE MITIGATE Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4,
- CVE-2009-0350 HIGH 9.3 DOWNGRADE Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a
- CVE-2009-0266 HIGH 9.3 DOWNGRADE Stack-based buffer overflow in Triologic Media Player 8.0.0.0 allows user-assisted remote attackers to execute
- CVE-2009-0262 HIGH 9.3 DOWNGRADE Stack-based buffer overflow in Triologic Media Player 7 and 8.0.0.0 allows user-assisted remote attackers to e
FAQ
How do I fix media player vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is media player being exploited right now?
None of the tracked media player CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which media player CVE should I patch first?
CVE-2009-4310 currently ranks highest (62/100): Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4,.