CVE:CVE-2009-4313
CNNVD:CNNVD-200912-183
Microsoft Windows 2000 SP4, XP SP2和SP3, 以及Server 2003 SP2中的Indeo32 codec中的ir32_32.dll 3.24.15.3，使远程攻击者可以借助一个多媒体文件中的畸形数据引起一个拒绝服务(堆崩溃)或执行任意代码。例如一个AVI文件。
solution:Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_2003_server to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp3,-:sp2,and avoid the version *:sp3,-:sp2