Windows Media Services
Vendor:
First CVE: Feb 23, 2000 · Active for 26 years
9
Total CVEs
More Total CVEs than 86% of tracked products
1.5
Avg CVEs / Year
Higher CVE frequency than 56% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 33% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Windows Media Services over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 23, 2000
26 years ago
Most Recent CVE
Sep 8, 2009
6,165 days ago
CVE Severity & Scoring
Windows Media Services9 CVEs
11%
44%
44%
All CVEs352,719 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown9 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown9 (100.0%)
User Interaction
None0 (0.0%)
Unknown9 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown9 (100.0%)
Top CVEs
Signals from CVEs in this product scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-0064HIGH Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista a | Dec 12, 2007 | 9.3 | 43 | NO | NO |
CVE-2000-0495MEDIUM Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request" vulnerability. | May 30, 2000 | 5.0 | 38 | NO | YES |
CVE-2009-2498HIGH Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, whic | Sep 8, 2009 | 9.3 | 35 | NO | NO |
CVE-2000-0211MEDIUM The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Wi | Feb 23, 2000 | 5.0 | 32 | NO | YES |
CVE-2008-3009HIGH Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) id | Dec 10, 2008 | 10.0 | 31 | NO | NO |
CVE-2009-2499HIGH Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbi | Sep 8, 2009 | 8.5 | 30 | NO | NO |
CVE-2001-0083MEDIUM Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memory leak that allows remote attackers to c | Feb 12, 2001 | 5.0 | 26 | NO | NO |
CVE-2003-0905MEDIUM Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of servi | Apr 15, 2004 | 5.0 | 24 | NO | NO |
Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicast | Nov 14, 2000 | 2.6 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (9 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
22.2% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (9 CVEs).
Media Mentions
Signals from CVEs in this product scope (9 CVEs).
Top CNAs Publishing CVEs For Windows Media Services
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.1 | 3 | 9.0 | 24.2% | 0 | 0 |
| 9 | 1 | 10.0 | 15.8% | 0 | 0 |
| 4.1 | 6 | 5.4 | 21.3% | 0 | 2 |
| 4.0 | 4 | 4.4 | 21.5% | 0 | 2 |
| 2008 | 3 | 9.3 | 17.5% | 0 | 0 |