Microsoft Windows Media Multiple Vulnerabilities( 09 September 2009 )

Last Update Date: 28 Jan 2011 Release Date: 9 Sep 2009 4328 Views

RISK: Medium Risk

Medium Risk

1. Windows Media Header Parsing Invalid Free Vulnerability

A remote code execution vulnerability exists in the way that Microsoft Windows handles specially crafted ASF format files. This vulnerability could allow remote code execution if a user opened a specially crafted file. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

2. Windows Media Playback Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft Windows handles MP3 media files. This vulnerability could allow remote code execution if a user opened a specially crafted file. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Impact

  • Remote Code Execution

System / Technologies affected

  • Microsoft Windows 2000
  • Windows XP
  • Windows Server 2003
  • Windows Vista
  • Windows Server 2008
  • Windows Media Format Runtime 9.0
  • Windows Media Format Runtime 9.5
  • Windows Media Format Runtime 11
  • Microsoft Media Foundation
  • Windows Media Services 9.1
  • Windows Media Services 2008

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Download locations for this patch

Vulnerability Identifier

Source

Related Link

Share with

Previous

Microsoft Windows DHTML Editing Component ActiveX Control Vulnerability( 09 September 2009 )

9 Sep 2009 4451 Views

Next

Microsoft Windows JScript Scripting Engine Remote Code Execution Vulnerability( 09 September 2009 )

9 Sep 2009 4206 Views

We use cookies to give you the best possible experience on our website. By continuing to browse this site, you give consent for cookies to be used. For more details please read our Cookie Policy.

PRIVACY POLICY