Intrusion PreventionMS.Windows.Media.Player.Asf.Remote.Code.Execution
Description
This indicates an attempt to exploit a Heap Overflow vulnerability in Windows Media Player.
The vulnerability is the result of an error in the handling of ASF files. A remote attacker can use a specially crafted ASF file to cause remote code execution.
Affected Products
Windows Media Player 6.4 and older versions.
Impact
This vulnerability could allow remote attackers to execute arbitrary code.
Recommended Actions
Refer to the Microsoft advisory for patches or update:
http://www.microsoft.com/technet/security/Bulletin/ms09-052.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 29757 |
| Created | Oct 22, 2011 |
| Updated | Mar 17, 2021 |
| Risk |
|
| CVE ID | CVE-2009-2527 |
| Exploit Prediction Score | 79.39% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | MediaPlayer |