CVE-2009-4311 Information

Description

Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4 XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media content as reported to Microsoft by Paul Byrne of NGS Software. NOTE: this might overlap CVE-2008-3615.

Reference

http://secunia.com/advisories/37592 http://securitytracker.com/id?1023302 http://support.microsoft.com/kb/954157 http://support.microsoft.com/kb/955759 http://support.microsoft.com/kb/976138 http://www.microsoft.com/technet/security/advisory/954157.mspx http://www.securityfocus.com/bid/37251 http://www.vupen.com/english/advisories/2009/3440 https://exchange.xforce.ibmcloud.com/vulnerabilities/54645 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A11975