RETIRED: Microsoft Windows Media Player MID File Parsing Integer Overflow Vulnerability

Bugtraq ID:	34534
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-1331
Remote:	Yes
Local:	No
Published:	Apr 15 2009 12:00AM
Updated:	May 12 2015 07:48PM
Credit:	HuoFu
Vulnerable:	Microsoft Windows Media Player 11
Not Vulnerable:

RETIRED: Microsoft Windows Media Player MID File Parsing Integer Overflow Vulnerability

Microsoft Windows Media Player is prone to an integer-overflow vulnerability.

An attacker can exploit this issue by tricking an unsuspecting victim into opening a malicious file with the vulnerable application. A successful exploit will allow the attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial of service.

Windows Media Player 11 is vulnerable; other versions may also be affected.

NOTE: This BID is being retired because exploits of this issue would have no security impact.

RETIRED: Microsoft Windows Media Player MID File Parsing Integer Overflow Vulnerability

The following proof of concept is available:

• /data/vulnerabilities/exploits/34534.pl

RETIRED: Microsoft Windows Media Player MID File Parsing Integer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Microsoft Windows Media Player MID File Parsing Integer Overflow Vulnerability

References:

• Windows Media Player Homepage (Microsoft)