Stack-based Buffer Overflow in Intel Indeo41 Codec for Windows Media Player by Microsoft

CVE-2009-4310

Summary

A stack-based buffer overflow vulnerability exists in the Intel Indeo41 codec used by Windows Media Player, affecting multiple versions of Microsoft Windows. This flaw can be exploited by remote attackers who craft malicious video files containing IV41 streams with specially designed compressed data. When processed, this can result in numerous loop iterations and potential arbitrary code execution on the victim's system, allowing the attacker to gain unauthorized control. It highlights the necessity for users to apply security updates and be cautious when opening media files from untrusted sources.

References