VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 14, 2009· Updated Jun 16, 2026

CVE-2009-2525

CVE-2009-2525

Description

Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly initialize unspecified functions within compressed audio files, which allows remote attackers to execute arbitrary code via (1) a crafted media file or (2) crafted streaming content, aka "Windows Media Runtime Heap Corruption Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

18
  • Microsoft/Windows Media Format Runtime4 versions
    cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*
    • (no CPE)
  • Microsoft/Windows Media Player
    cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*
  • Microsoft/Windows 2000
    cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
  • Microsoft/Windows Server 2003
    cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
  • Microsoft/Windows Server 20084 versions
    cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*
  • Microsoft/Windows4 versions
    cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*
  • Microsoft/Windows Xp3 versions
    cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.