CVE-2009-4311

no score yetEPSS 22%

Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media content, as reported to Microsoft by Paul Byrne of NGS Software. NOTE: this might overlap CVE-2008-3615.

EPSS: 22% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2009-12-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_2000
microsoft:windows_2003_server
microsoft:windows_xp

References

http://secunia.com/advisories/37592
http://securitytracker.com/id?1023302
http://support.microsoft.com/kb/954157
http://support.microsoft.com/kb/955759
http://support.microsoft.com/kb/976138

Check your stack JSON