CVE-2009-4210

The Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted media content.

• CWE-94

• http://secunia.com/advisories/37592Vendor Advisory
• http://securitytracker.com/id?1023302
• http://support.microsoft.com/kb/954157Vendor Advisory
• http://support.microsoft.com/kb/955759Vendor Advisory
• http://support.microsoft.com/kb/976138Patch, Vendor Advisory
• http://www.fortiguard.com/advisory/FGA-2009-45.html
• http://www.microsoft.com/technet/security/advisory/954157.mspxVendor Advisory
• http://www.osvdb.org/60857
• http://www.securityfocus.com/archive/1/508323/100/0/threaded
• http://www.securityfocus.com/bid/37251
• http://www.vupen.com/english/advisories/2009/3440Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54644
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54645
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11677
• http://secunia.com/advisories/37592Vendor Advisory
• http://securitytracker.com/id?1023302
• http://support.microsoft.com/kb/954157Vendor Advisory
• http://support.microsoft.com/kb/955759Vendor Advisory
• http://support.microsoft.com/kb/976138Patch, Vendor Advisory
• http://www.fortiguard.com/advisory/FGA-2009-45.html
• http://www.microsoft.com/technet/security/advisory/954157.mspxVendor Advisory
• http://www.osvdb.org/60857
• http://www.securityfocus.com/archive/1/508323/100/0/threaded
• http://www.securityfocus.com/bid/37251
• http://www.vupen.com/english/advisories/2009/3440Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54644
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54645
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11677

Published

Dec 13, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-4204SQL injection vulnerability in read.php in Flashlight Free E…
• CVE-2009-4205Directory traversal vulnerability in admin.php in Flashlight…
• CVE-2009-4206SQL injection vulnerability in admin.link.modify.php in Mill…
• CVE-2009-4207Cross-site scripting (XSS) vulnerability in the Webform modu…
• CVE-2009-4208SQL injection vulnerability in the os_news module in Open-sc…
• CVE-2009-4209Multiple cross-site scripting (XSS) vulnerabilities in admin…
• CVE-2009-4211The U.S. Defense Information Systems Agency (DISA) Security …
• CVE-2009-4212Multiple integer underflows in the (1) AES and (2) RC4 decry…
• CVE-2009-4214Cross-site scripting (XSS) vulnerability in the strip_tags f…
• CVE-2009-4215Panda Global Protection 2010, Internet Security 2010, and An…
• CVE-2009-4216Directory traversal vulnerability in funzioni/lib/menulast.p…
• CVE-2009-4217SQL injection vulnerability in the Itamar Elharar MusicGalle…