CVE:CVE-2009-2499
CNNVD:CNNVD-200909-127
Windows Media Format Runtime用于向使用Windows Media内容的应用程序提供信息和工具。 
Windows Media Format运行时环境在处理MP3文件时没有正确地处理特制的元数据，用户受骗打开了特制文件或从网站打开了特制的流内容就会触发内存破坏，导致执行任意指令。
solution:Upgrade microsoft windows_media_format_runtime to a higher version than 9.0,9.5,11,and avoid the version 9.0,9.5,11; Upgrade microsoft windows_2000 to a higher version than -:sp4,and avoid the version -:sp4; Upgrade microsoft windows_xp to a higher version than -:sp2,-:sp3,*:sp2,and avoid the version -:sp2,-:sp3,*:sp2; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,*,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than -,-:sp2,and avoid the version -:sp2; Upgrade microsoft windows_vista to a higher version than *,*:sp1,*:sp2,-:sp1,-:sp2,-,and avoid the version *:sp1,*:sp2,-:sp1,-:sp2; Upgrade microsoft windows_media_services to a higher version than 9.1,2008,and avoid the version 9.1,2008; Upgrade microsoft windows_media_foundation to a higher version than -