Windows Media Player does not properly handle malformed Windows Media Metafiles. This vulnerability may allow a remote attacker to execute arbitrary code or crash Windows Media Player.
Windows Media Player (WMP) is a multimedia application that comes with Microsoft Windows. According to Microsoft:
Advanced Stream Redirector (.asx) files, also known as Windows Media Metafiles, are text files that provide information about a file stream and its presentation. ASX files go beyond the simple task of defining playlists to provide Windows Media Player with information about how to present particular media items of the playlist.
Although the buffer overflow is limited, it may still be possible to corrupt memory in a way that can allow an attacker to execute code or crash WMP.
Apply an update from Microsoft
This vulnerability was publicly disclosed by sehato.
This document was written by Jeff Gennari.
|Date First Published:||2006-12-08|
|Date Last Updated:||2006-12-13 16:36 UTC|