Produkt Windows media services (...) - CVEMAP.ORG

Podatności dla 'Windows media services'

2009-09-08

CVE-2009-2499

CWE-94

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory Corruption Vulnerability."

CVE-2009-2498

CWE-94

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka "Windows Media Header Parsing Invalid Free Vulnerability."

2008-12-10

CVE-2008-3009

CWE-255

Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka "SPN Vulnerability."

2007-12-11

CVE-2007-0064

CWE-119

Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.

2004-04-15

CVE-2003-0905

CWE-Other

Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of service (disallowing new connections) via a certain sequence of TCP/IP packets.

2001-02-12

CVE-2001-0083

CWE-Other

Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memory leak that allows remote attackers to cause a denial of service via a series of severed connections, aka the "Severed Windows Media Server Connection" vulnerability.

2000-11-14

CVE-2000-0849

CWE-Other

Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicast Service Race Condition" vulnerability.

2000-05-30

CVE-2000-0495

CWE-Other

Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request" vulnerability.

2000-02-23

CVE-2000-0211

CWE-Other

The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability.

>>> Vendor: Microsoft 622 Produkty

Exchange server

Internet information server

Personal web server

Commerce server

Backoffice resource kit

Terminal server

Java virtual machine

Commercial internet system

Site server commerce

Outlook express

Windows explorer

Data access components

Zero administration kit

Msn setup bulletin board services

Visual interdev

Office converter pack

Systems management server

Virtual machine

Home publishing

Windows media services

Windows messaging

Windows media rights manager

Active movie control

Network monitor

Windows media player

Indexing service

Windows script host

Frontpage server extensions

Windows 2000 terminal services

Xml core services

Msn chat control

Msn messenger service for exchange

Windows 98 plus pack

Microsoft data access components

Metadirectory services

Content management server

Tsac activex control

Office web components

Ie for macintosh

.net windows server

Directx files viewer control

File transfer manager

Baseline security analyzer

Foundation class library

Windows 2003 server

Network firmware

Zobacz wszystkie produkty dla producenta Microsoft

Copyright 2024, cxsecurity.com