CVE-2013-3127
Last modified
CVE-2013-3127 is a vulnerability of currently unknown severity. The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execute arbitrary code via a crafted media file, aka "WMV Video Decoder Remote Code Execution Vulnerability.". EPSS estimates a 21.91% chance of exploitation in the next 30 days.
Description
The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execute arbitrary code via a crafted media file, aka "WMV Video Decoder Remote Code Execution Vulnerability."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows Media Format Runtime | 9 |
| Microsoft | Windows Media Format Runtime | 9.5 |
| Microsoft | Windows Media Format Runtime | 11 |
| Microsoft | Windows Media Player | 11 |
| Microsoft | Windows Media Player | 12 |
References
- http://www.us-cert.gov/ncas/alerts/TA13-190AThird Party Advisory, US Government Resource
- http://www.us-cert.gov/ncas/alerts/TA13-190AThird Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-3127?
How severe is CVE-2013-3127?
How do I fix CVE-2013-3127?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-3121Microsoft Internet Explorer 6 through 10 allows remote attac…
- CVE-2013-3122Microsoft Internet Explorer 9 allows remote attackers to exe…
- CVE-2013-3123Microsoft Internet Explorer 8 through 10 allows remote attac…
- CVE-2013-3124Microsoft Internet Explorer 9 allows remote attackers to exe…
- CVE-2013-3125Microsoft Internet Explorer 10 allows remote attackers to ex…
- CVE-2013-3126Microsoft Internet Explorer 9 and 10, when script debugging …
- CVE-2013-3128The kernel-mode drivers in Microsoft Windows XP SP2 and SP3,…
- CVE-2013-3129Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Si…7.8
- CVE-2013-3130Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2013-3131Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, an…
- CVE-2013-3132Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5…
- CVE-2013-3133Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 doe…
Are you affected by CVE-2013-3127?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
