PT-2012-2229 · Microsoft · Windows Media Player+5

Publicado 2012-01-10 · Atualizado 2024-10-17 · CVE-2012-0003

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Media Player versions in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2

Description A remote code execution issue exists in Windows Media Player, allowing attackers to execute arbitrary code via a crafted MIDI file. This could enable an attacker to take complete control of an affected system.

Recommendations For Windows Media Player in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, consider disabling the playback of MIDI files in Windows Media Player until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2012-0003

Produtos afetados

Server 2003

Server 2008

Vista

Windows

Windows Media Player

Windows Xp

Referências · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms12_004_midi.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18426 · Exploit
• http://securitytracker.com/id?1026492 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0003 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14337 · Nota
• http://us-cert.gov/cas/techalerts/TA12-010A.html · Nota
• https://t.me/cvenotify/98658 · Publicação no Telegram
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-004 · Aviso do Fabricante
• http://technet.microsoft.com/en-us/security/bulletin/MS12-004 · Nota
• http://securityfocus.com/bid/51292 · Nota
• http://secunia.com/advisories/47485 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0003 · Nota de Segurança