Heap-based Buffer Overflow in Intel Indeo41 Codec for Windows Media Player by Microsoft

CVE-2009-4309

Summary

A heap-based buffer overflow exists in the Intel Indeo41 codec used by Windows Media Player, posing a risk to systems running Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2. This vulnerability can be exploited by remote attackers through specially crafted media files, particularly those containing AVI format, to execute arbitrary code. By supplying a large size value in a movi record within an IV41 stream, an attacker could take control of the affected system, highlighting the critical need for users to apply security updates and take proactive measures to mitigate risks.

References