← Vulnerability feed

Vulnerability record · CVE-2014-2671 · published 31 March 2014

CVE-2014-2671: Windows Media Player WAV file memory corruption

Microsoft · Windows Media Player

Windows Media Player 11.0.5721.5230 mishandles a crafted WAV file, causing memory corruption. The flaw is remotely reachable and can crash the player or possibly lead to further impact, though the record does not specify the full consequences.

6.8 CVSS 2.0 Medium EPSS 46% · top 1.2% CWE-119 · Memory buffer overflow
6.8CVSS 2.0 base score
46%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References, 4 tagged exploit
17 Jun 2026Last modified by NVD

Description

Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted WAV file.

AV:N/AC:M/Au:N/C:P/I:P/A:P

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: medium.

high priorityPublic exploit code exists and EPSS is high, but the confirmed impact is denial of service and the record lacks patch and version detail.

What it is

Windows Media Player 11.0.5721.5230 mishandles a crafted WAV file, causing memory corruption. The flaw is remotely reachable and can crash the player or possibly lead to further impact, though the record does not specify the full consequences.

Impact

An attacker can crash Windows Media Player through memory corruption; the description also allows for unspecified other impact, but no code execution or data compromise is confirmed.

Attack surface

Reached by opening or playing a crafted WAV file, typically delivered by a remote attacker; the CVSS vector AV:N/AC:M/Au:N indicates network delivery, medium complexity, and no authentication, with user interaction implied by opening the file.

Exploitation

Public exploit references exist (Packet Storm, Exploit-DB, SecurityFocus), but the CVE is not in CISA KEV; EPSS is 0.46291 (98.8th percentile), indicating elevated predicted exploitation activity.

What to do

  • Apply the Microsoft patch for the affected Windows Media Player version if one is available; the record does not list a patch, so verify with the vendor.
  • Restrict or block untrusted WAV file attachments and downloads at email and web gateways.
  • Disable or remove Windows Media Player on systems that do not require it.
  • Open media files only from trusted sources and avoid previewing unknown WAV files.

Detection

  • Monitor for Windows Media Player crashes or abnormal process termination correlated with WAV file opens.
  • Scan email and web proxy logs for WAV attachments or downloads from untrusted sources.
  • Use endpoint detection to flag wmplayer.exe spawning or loading unexpected modules after opening a media file.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/125834 Exploit
http://www.exploit-db.com/exploits/32477/
http://www.securityfocus.com/bid/66403 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/92080
http://packetstormsecurity.com/files/125834 Exploit
http://www.exploit-db.com/exploits/32477/
http://www.securityfocus.com/bid/66403 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/92080

Track CVE-2014-2671 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-3009Microsoft windows media player vulnerabilityMicrosoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the …EPSS 16%10.0CVE-2008-3010Microsoft windows media player information exposure vulnerabilityMicrosoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 incorrectly associate ISATAP ad…EPSS 15%10.0CVE-2004-0597libpng PNG chunk buffer overflows allow remote code executionlibpng 1.2.5 and earlier contain multiple buffer overflows in the png_handle_tRNS, png_handle_sBIT and png_handle_hIST functions, which fail to valid…EPSS 83%analysed9.3CVE-2015-1728Microsoft windows media player vulnerabilityMicrosoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "Windows M…EPSS 18%9.3CVE-2013-3127Microsoft windows media format runtime code injection vulnerabilityThe Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime…EPSS 22%9.3CVE-2010-2745Microsoft windows media player code injection vulnerabilityMicrosoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted rem…EPSS 24%9.3CVE-2010-3138Microsoft windows media player vulnerabilityUntrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan …EPSS 27%9.3CVE-2010-0268Microsoft windows media player vulnerabilityUnspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP…EPSS 20%

Source: NIST National Vulnerability Database (record CVE-2014-2671), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.