Denial of Service Vulnerability in Microsoft Windows Media Player
CVE-2008-4927

Currently unrated

Key Information:

Vendor

Microsoft
Status
Windows Media Player
Vendor
CVE Published:
4 November 2008

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 25%

What is CVE-2008-4927?

A vulnerability in Microsoft Windows Media Player (WMP) versions 9.0 through 11 allows user-assisted attackers to exploit the application by delivering a malformed MIDI or DAT file. This issue can lead to a denial of service, resulting in an application crash during the parsing of the MThd header. As the exact origins of this information are unknown, threats should be evaluated carefully based on third-party insights.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2008-4927 - Proof of Concept

References

http://www.securityfocus.com/bid/32077
vdb-entryx_refsource_BID
http://www.securityfocus.com/data/vulnerabilities/exploit...
x_refsource_MISC

EPSS Score

25% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

.