CVE-2009-0555

Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly process Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted audio file that uses the Windows Media Speech codec, aka "Windows Media Runtime Voice Sample Rate Vulnerability."

• CWE-94

• http://www.us-cert.gov/cas/techalerts/TA09-286A.htmlThird Party Advisory, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051Patch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6407Third Party Advisory
• http://www.us-cert.gov/cas/techalerts/TA09-286A.htmlThird Party Advisory, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051Patch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6407Third Party Advisory

Published

Oct 14, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0549Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 20…
• CVE-2009-0550Windows HTTP Services (aka WinHTTP) in Microsoft Windows 200…
• CVE-2009-0551Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2…8.1
• CVE-2009-0552Unspecified vulnerability in Microsoft Internet Explorer 5.0…
• CVE-2009-0553Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2…
• CVE-2009-0554Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Wind…8.8
• CVE-2009-0556Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3…8.8
• CVE-2009-0557Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 20…7.8
• CVE-2009-0558Array index error in Excel in Microsoft Office 2000 SP3 and …
• CVE-2009-0559Stack-based buffer overflow in Excel in Microsoft Office 200…
• CVE-2009-0560Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 20…
• CVE-2009-0561Integer overflow in Excel in Microsoft Office 2000 SP3, Offi…