AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-2498

HIGH · CVSS 9.3 EPSS 21.21%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-09-08 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2009-2498
Severity
HIGH
CVSS
9.3
EPSS
21.21%
Microsoft Windows

Original NVD Description

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka "Windows Media Header Parsing Invalid Free Vulnerability."