CVE-2007-0064

Description

Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.

Risk Information

Base Score

7.8

MODERATE

Vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

70.075

Associated Vulnerability

Vulnerability	OS Platform
ms07-068: vulnerability in windows media file format could allow remote code execution for Windows 2000 (KB941569)	Windows
ms07-068: vulnerability in windows media file format could allow remote code execution for Windows XP (KB941569) x86 based systems	Windows
ms07-068: vulnerability in windows media file format could allow remote code execution for Windows Server 2003 (KB941569)	Windows
ms07-068: vulnerability in windows media file format could allow remote code execution for Windows Vista (KB941569)	Windows
ms07-068: vulnerability in windows media file format could allow remote code execution for Windows XP (KB941569) x86 based systems for SP3	Windows
Security Update for Windows Server 2003 (KB944275)	Windows
ms07-068: vulnerability in windows media file format could allow remote code execution for Windows Vista for x64-based Systems (KB941569)	Windows
ms07-068: vulnerability in windows media file format could allow remote code execution for Windows XP x64 Edition (KB941569)	Windows
ms07-068: vulnerability in windows media file format could allow remote code execution for Windows Server 2003 x64 Edition (KB941569)	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234