PT-2004-2530 · Microsoft · Windows Xp

Publicado 2004-10-22 · Atualizado 2017-07-11 · CVE-2004-1623

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Windows XP SP1

Description The issue concerns a denial of service that can be triggered by a WAV file with a specifically crafted invalid file header. This header has its fmt chunk length set to 0xFFFFFFFF, causing an infinite loop in Explorer when processed.

Recommendations For Windows XP SP1, consider avoiding the use of WAV files with potentially invalid headers to prevent the denial of service. As a temporary workaround, restrict access to WAV files from untrusted sources until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2004-1623

Produtos afetados

Windows Xp

Referências · 8

• 🔥 http://securityfocus.com/bid/11503 · Exploit
• 🔥 https://exploit-db.com/exploits/24699 · Exploit
• 🔥 http://hexview.com/docs/20041021-1.txt · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17864 · Nota
• http://osvdb.org/11053 · Nota
• http://marc.info/?l=bugtraq&m=109846319313443&w=2 · Nota
• http://securitytracker.com/id?1011880 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1623 · Nota de Segurança