PT-2008-6103 · Microsoft · Windows Media Player

Publicado 2008-11-04 · Atualizado 2008-11-05 · CVE-2008-4927

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Player versions 9.0 through 11

Description The issue allows user-assisted attackers to cause a denial of service, resulting in an application crash, via a malformed MIDI or DAT file. This is related to MThd Header Parsing.

Recommendations For versions 9.0 through 11, avoid using the affected Microsoft Windows Media Player to open MIDI or DAT files from untrusted sources until a fix is available. As a temporary workaround, consider restricting the use of MIDI and DAT file playback in Microsoft Windows Media Player to minimize the risk of exploitation.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-4927

Produtos afetados

Windows Media Player

Referências · 3

• 🔥 http://securityfocus.com/data/vulnerabilities/exploits/32077.py · Exploit
• http://securityfocus.com/bid/32077 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4927 · Nota de Segurança