Microsoft Windows Media Player Digital Rights Management Arbitrary Web Page Launch Weakness

Bugtraq ID:	13607
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 12 2005 12:00AM
Updated:	May 12 2005 12:00AM
Credit:	The individual or individuals responsible for the discovery of this issue are currently unknown; the vendor disclosed this issue.
Vulnerable:	Microsoft Windows Media Player 9.0 + Microsoft Windows Server 2003 Datacenter Edition + Microsoft Windows Server 2003 Datacenter Edition + Microsoft Windows Server 2003 Datacenter Edition Itanium 0 + Microsoft Windows Server 2003 Datacenter Edition Itanium 0 + Microsoft Windows Server 2003 Enterprise Edition + Microsoft Windows Server 2003 Enterprise Edition + Microsoft Windows Server 2003 Enterprise Edition Itanium 0 + Microsoft Windows Server 2003 Enterprise Edition Itanium 0 + Microsoft Windows Server 2003 Standard Edition + Microsoft Windows Server 2003 Standard Edition + Microsoft Windows Server 2003 Web Edition + Microsoft Windows Server 2003 Web Edition Microsoft Windows Media Player 10.0
Not Vulnerable:

Microsoft Windows Media Player Digital Rights Management Arbitrary Web Page Launch Weakness

Media Player Digital Rights Management (DRM) is prone to a weakness that could permit the launch of an arbitrary Web page.

This issue has been addressed and updates are available for Media Player 10 and for Windows Media Player 9.

Microsoft Windows Media Player Digital Rights Management Arbitrary Web Page Launch Weakness

An exploit is not required.

Microsoft Windows Media Player Digital Rights Management Arbitrary Web Page Launch Weakness

Solution:
Microsoft has released security advisory 892313 addressing this issue. An update is available through the Microsoft Download Center for users of Windows Media Player 10, which requires Microsoft Windows XP, and for users of Windows Media Player 9 Series on Windows XP or on Windows 2000.

Microsoft Windows Media Player Digital Rights Management Arbitrary Web Page Launch Weakness

References:

• Microsoft Security Advisory (892313) (Microsoft)
  
• Windows Media Player Homepage (Microsoft)