Microsoft Windows Media Player AVI File Colorspace Conversion Remote Memory Corruption Vulnerability
BID:38790
Info
Microsoft Windows Media Player AVI File Colorspace Conversion Remote Memory Corruption Vulnerability
| Bugtraq ID: | 38790 |
| Class: | Unknown |
| CVE: |
CVE-2010-1042 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 17 2010 12:00AM |
| Updated: | Apr 13 2015 09:02PM |
| Credit: | ITSecTeam |
| Vulnerable: |
Microsoft Windows Media Player 11 |
| Not Vulnerable: | |
Discussion
Microsoft Windows Media Player AVI File Colorspace Conversion Remote Memory Corruption Vulnerability
Microsoft Windows Media Player is prone to a remote memory-corruption vulnerability when handling specially crafted AVI files.
An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file with the vulnerable application. A successful exploit may allow arbitrary code to run in the context of the currently logged-in user.
Windows Media Player 11 is vulnerable; other versions may also be affected.
UPDATE (Mar 19, 2010): The vendor has not been able to replicate this issue. Pending further investigation, this BID will be updated and possibly retired.
Microsoft Windows Media Player is prone to a remote memory-corruption vulnerability when handling specially crafted AVI files.
An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file with the vulnerable application. A successful exploit may allow arbitrary code to run in the context of the currently logged-in user.
Windows Media Player 11 is vulnerable; other versions may also be affected.
UPDATE (Mar 19, 2010): The vendor has not been able to replicate this issue. Pending further investigation, this BID will be updated and possibly retired.
Exploit / POC
Microsoft Windows Media Player AVI File Colorspace Conversion Remote Memory Corruption Vulnerability
The following proof-of-concept is available:
The following proof-of-concept is available:
Solution / Fix
Microsoft Windows Media Player AVI File Colorspace Conversion Remote Memory Corruption Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Microsoft Windows Media Player AVI File Colorspace Conversion Remote Memory Corruption Vulnerability
References:
References:
- Windows Media Player Homepage (Microsoft)