CVE Feed

    Dashboard / CVE / CVE-2013-3127

    CVE-2013-3127

    The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execute arbitrary code via a crafted media file, aka "WMV Video Decoder Remote Code Execution Vulnerability."

    Published:Jul 10, 2013
    Last Modified:Apr 11, 2025
    EPS:Jul 10, 2013
    EPSS Score:0.45344
    CVSS Score:9.3

    Affected Products

    Vendor
    Microsoft
    Product
    Windows Media Format Runtime
    Vendor
    Microsoft
    Product
    Windows Media Player

    Exploits

    No exploit reference

    Related CVEs

    CVE-2010-1879 (CVSS 9.3) — Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Enc…
    CVE-2009-0555 (CVSS 9.3) — Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and…
    CVE-2009-2525 (CVSS 9.3) — Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and…
    CVE-2009-2498 (CVSS 9.3) — Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properl…
    CVE-2009-2499 (CVSS 8.5) — Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold,…
    CVE-2008-3009 (CVSS 10) — Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.…
    CVE-2007-0064 (CVSS 9.3) — Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High