Vulnerability Note VU#187528

Microsoft Windows Media Player buffer overflow in Active Stream Redirector (.asx) file parser

Original Release date: 27 Sep 2002 | Last revised: 27 Sep 2002


There is a buffer overflow in the parsing of Active Stream Redirector (.ASX) files. This buffer overflow may allow a remote attacker to execute arbitrary code when a user views a malicious web page.


There is a buffer overflow in the processing of Active Stream Redirector (.ASX) files in Windows Media Player version 6.4 and 7. An Active Stream Redirector is a file type used by Windows Media Player to determine where a media stream can be found on the Internet, and how to play it.

This vulnerability is a variant of the vulnerability described in VU#675320 and MS00-090.


An attacker may be able to execute arbitrary code on vulnerable systems when the user visits a web page.


Apply a Patch

Microsoft has published patches correcting this vulnerability. The patches are listed in their advisory at:

Systems Affected (Learn More)

VendorStatusDate NotifiedDate Updated
Microsoft CorporationAffected-16 Jul 2002
If you are a vendor and your product is affected, let us know.

CVSS Metrics (Learn More)

Group Score Vector
Base N/A N/A
Temporal N/A N/A
Environmental N/A N/A



This document was written by Cory F. Cohen.

Other Information

  • CVE IDs: CAN-2001-0242
  • Date Public: 23 May 2001
  • Date First Published: 27 Sep 2002
  • Date Last Updated: 27 Sep 2002
  • Severity Metric: 4.43
  • Document Revision: 7


If you have feedback, comments, or additional information about this vulnerability, please send us email.