Vulnerability Details : CVE-2009-1546

Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI file, or cause a denial of service on a Windows XP SP2 or SP3, Server 2003 SP2, Vista Gold, SP1, or SP2, or Server 2008 Gold or SP2 system via a crafted AVI file, aka "AVI Integer Overflow Vulnerability."

Vulnerability category: OverflowExecute codeDenial of service

Published 2009-08-12 17:30:01

Updated 2018-10-30 16:25:50

Source Microsoft Corporation

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2009-1546

Probability of exploitation activity in the next 30 days: 96.32%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 99 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2009-1546

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
8.5	HIGH	AV:N/AC:M/Au:S/C:C/I:C/A:C	6.8	10.0	[email protected]
Access Vector: Network Access Complexity: Medium Authentication: Single Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2009-1546

CWE-189

Assigned by: [email protected] (Primary)

References for CVE-2009-1546

Products affected by CVE-2009-1546

Microsoft » Windows Xp » Update SP2 X64 Edition
cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Version: N/A Update SP2
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Version: N/A Update SP3
cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
Matching versions
Microsoft » Windows 2003 Server » Version: SP2
cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 2003 Server » Version: SP2 Itanium Edition
cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*
Matching versions
Microsoft » Windows 2003 Server » Version: SP2 X64 Edition
cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*
Matching versions
Microsoft » Windows Vista » Update SP1 X64 Edition
cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*
Matching versions
Microsoft » Windows Vista » Update SP2 X64 Edition
cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*
Matching versions
Microsoft » Windows Vista » Version: N/A X64 Edition
cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2008 » Itanium Edition
cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2008 » Update SP2 X64 Edition
cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2008 » Version: N/A X32 Edition
cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2008 » Version: N/A Update SP2 X86 Edition
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2008 » Version: N/A X64 Edition
cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2008 » Version: N/A Update SP2 Itanium Edition
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*
Matching versions