Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

Windows Media Player can crash from malicious audio files

CVE-2008-5745 · published 17 years ago
Summary

Windows Media Player versions 9, 10, and 11 may stop working if it opens specially crafted WAV, SND, or MID files. This causes the program to shut down unexpectedly, denying service to users. Update the player to the latest version or avoid opening untrusted audio files until a patch is applied.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
microsoft windows_media_player 9
10
11
cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*
Original advisory text
Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (app...
Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this has been incorrectly reported as a code-execution vulnerability. NOTE: it is not clear whether this issue is related to CVE-2008-4927.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
4.3 Medium
Exploitation
21% chance of attack within 30 days
Type
CWE-189Numeric Errors
Timeline
Published29 Dec 2008
Updated29 Sep 2026
First seen29 Sep 2026
Sources
CVE-2008-5745 · NVD
Track software like this
Free during beta