Improper input validation in Microsoft Windows Media Player
CVE-2008-4927
Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted attackers to cause a denial of service (application crash) via a malformed (1) MIDI or (2) DAT file, related to "MThd Header Parsing." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.040 (90.1th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_media_player — versions 9, 10, 11
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (Exploit, x_refsource_MISC)