https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T16:02:33.173619+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2009-avi-371 certa-2009-avi-371 — Deux vulnérabilités dans <span class="textit">Windows Media Format</span> permettent l'exécution de code arbitraire à d… 2026-10-14T16:02:33.192259+00:00 certa-2009-avi-371 https://cve.radiocsirt.org/vuln/euvd-2026-123313 EUVD-2026-123313 2026-10-14T16:02:33.192293+00:00 EUVD-2026-123313 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2499 fkie_cve-2009-2499 2026-10-14T16:02:33.192308+00:00

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory Corruption Vulnerability."

 https://cve.radiocsirt.org/vuln/ghsa-3c23-3vh8-88jr GHSA-3c23-3vh8-88jr 2026-10-14T16:02:33.192337+00:00

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory Corruption Vulnerability."

 https://cve.radiocsirt.org/vuln/gsd-2009-2499 gsd-2009-2499 2026-10-14T16:02:33.192355+00:00 gsd-2009-2499 https://cve.radiocsirt.org/vuln/jvndb-2009-000059 jvndb-2009-000059 2026-10-14T16:02:33.192366+00:00

Microsoft Windows contains a buffer overflow vulnerability. Windows Media Format Runtime included in Microsoft Windows contains a buffer overflow vulnerability when parsing specific files. The security update for this vulnerability is contained in the Microsoft Security Bulletin Summary for September 2009. Hiroshi Noguchi of Alice Carroll fan club reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.