K-Lite Mega Codec Pack 'vsfilter.dll' Denial Of Service Vulnerability

Bugtraq ID:	31400
Class:	Unknown
CVE:	CVE-2008-5072
Remote:	Yes
Local:	No
Published:	Sep 25 2008 12:00AM
Updated:	May 07 2015 05:23PM
Credit:	Aodrulez
Vulnerable:	K-Lite Mega Codec Pack 3.5.7.0
Not Vulnerable:

K-Lite Mega Codec Pack 'vsfilter.dll' Denial Of Service Vulnerability

K-Lite Mega Codec pack is prone to a denial-of-service vulnerability that occurs when the 'vsfilter.dll' library is installed on an affected computer.

Attackers can exploit this issue to cause Windows Explorer to crash, denying service to legitimate users.

K-Lite Mega Codec Pack 'vsfilter.dll' Denial Of Service Vulnerability

To exploit this issue, an attacker must entice an unsuspecting user to highlight a malicious file or select the file in Windows Explorer.

The following example file is available:

• /data/vulnerabilities/exploits/31400.flv

K-Lite Mega Codec Pack 'vsfilter.dll' Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

K-Lite Mega Codec Pack 'vsfilter.dll' Denial Of Service Vulnerability

References:

• K-Lite Mega Codec Pack Homepage (K-Lite)
  
• Vendor Home Page (Microsoft)