CVE:CVE-2009-0555
CNNVD:CNNVD-200910-209
Windows Media Format Runtime是美国微软（Microsoft）公司开发的Windows Media Player中所使用的运行时库。Windows Media Player是美国微软（Microsoft）公司开发的一款免费的媒体播放器，是Windows操作系统中默认捆绑的媒体播放器。
Windows Media Runtime没有正确的处理特制的ASF文件。攻击者可以通过创建Windows媒体语音帧中指定了恶意采样率的特制音频文件来利用这个漏洞，如果使用了受影响版本的Windows Media Player播放就会导致远程执行代码。成功利用此漏洞的攻击者便可完全控制受影响的系统。
solution:Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_media_format_runtime to a higher version than 9.0,9.5,11,and avoid the version 9.0,9.5,11; Upgrade microsoft windows_media_player to a higher version than 9,and avoid the version 9; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,and avoid the version *:sp2,*:sp3; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,-:sp2,and avoid the version *:sp2,-:sp2; Upgrade microsoft windows_server_2008 to a higher version than *,*:sp2,and avoid the version *:sp2; Upgrade microsoft windows_vista to a higher version than *,*:sp1,*:sp2,and avoid the version *:sp1,*:sp2