CVE:CVE-2009-2525
CNNVD:CNNVD-200910-225
Windows Media Format Runtime是美国微软（Microsoft）公司开发的Windows Media Player中所使用的运行时库。Windows Media Player是美国微软（Microsoft）公司开发的一款免费的媒体播放器，是Windows操作系统中默认捆绑的媒体播放器。
Windows Media Runtime没有正确的初始化压缩音频文件中的某些函数，用户受骗打开了特制的媒体文件或接收到了特制的流媒体内容就可能触发堆内存破坏，导致以当前用户的权限执行任意代码。
solution:Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_media_format_runtime to a higher version than 9.0,9.5,11,and avoid the version 9.0,9.5,11; Upgrade microsoft windows_media_player to a higher version than 9,and avoid the version 9; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,and avoid the version *:sp2,*:sp3; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *,*:sp2,and avoid the version *:sp2; Upgrade microsoft windows_vista to a higher version than *,*:sp1,*:sp2,and avoid the version *:sp1,*:sp2