CVE-2009-4210

Published: Dec 13, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted media content.

Affected (7)

Products: Microsoft: Windows 2000, Windows 2003 Server, Windows Xp

3 products

Windows 2003 Server

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2003 Server	All versions
Microsoft Windows 2003 Server	All versions
Microsoft Windows 2003 Server	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

Related CWEs

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (28)

http://secunia.com/advisories/37592

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1023302

Source: cve@mitre.org

http://support.microsoft.com/kb/954157

Source: cve@mitre.org

Vendor Advisory

http://support.microsoft.com/kb/955759

Source: cve@mitre.org

Vendor Advisory

http://support.microsoft.com/kb/976138

Source: cve@mitre.org

PatchVendor Advisory

http://www.fortiguard.com/advisory/FGA-2009-45.html

Source: cve@mitre.org

http://www.microsoft.com/technet/security/advisory/954157.mspx

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/60857

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/508323/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/37251

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/3440

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/54644

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/54645

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11677

Source: cve@mitre.org

http://secunia.com/advisories/37592

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1023302

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.microsoft.com/kb/954157

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.microsoft.com/kb/955759

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.microsoft.com/kb/976138

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.fortiguard.com/advisory/FGA-2009-45.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.microsoft.com/technet/security/advisory/954157.mspx

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/60857

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/508323/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/37251

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/3440

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/54644

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/54645

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11677

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.