CVE-2008-5745

no score yetEPSS 21%

microsoft windows media player: no CVSS score yet. EPSS 21% chance of exploitation in the next 30 days.

Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this has been incorrectly reported as a code-execution vulnerability. NOTE: it is not clear whether this issue is related to CVE-2008-4927.

EPSS: 21% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-189
Published: 2008-12-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_media_player

References

http://securityreason.com/securityalert/4823
http://www.securityfocus.com/archive/1/499579/100/0/threaded
http://www.securityfocus.com/bid/33018
http://www.securitytracker.com/id?1021495
https://exchange.xforce.ibmcloud.com/vulnerabilities/47664

Check your stack JSON