Microsoft Windows Movie Maker '.wav' File Denial of Service Vulnerability

Bugtraq ID:	61334
Class:	Unknown
CVE:	CVE-2013-4858
Remote:	Yes
Local:	No
Published:	Jul 18 2013 12:00AM
Updated:	Dec 30 2013 12:21AM
Credit:	ariarat
Vulnerable:	Microsoft Windows Movie Maker 2.1.4026
Not Vulnerable:

Microsoft Windows Movie Maker '.wav' File Denial of Service Vulnerability

Microsoft Windows Movie Maker is prone to a denial-of-service vulnerability.

Successful exploits may allow attackers to crash the affected application, denying service to legitimate users. Due to the nature of this issue, arbitrary code execution may be possible; this has not been confirmed.

Microsoft Windows Movie Maker 2.1.4026.0 is vulnerable; other versions may also be affected.

Microsoft Windows Movie Maker '.wav' File Denial of Service Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/61334.py
• /data/vulnerabilities/exploits/61334.rb

Microsoft Windows Movie Maker '.wav' File Denial of Service Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Microsoft Windows Movie Maker '.wav' File Denial of Service Vulnerability

References:

• Microsoft Homepage (Microsoft)