PT-2012-2352 · Microsoft · Windows Media Player+2

Alexander Gavrun · Publicado 2012-02-14 · Atualizado 2023-12-07 · CVE-2012-0150

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description A buffer overflow issue exists in the way the msvcrt DLL calculates buffer size, allowing remote code execution when a user opens a specially crafted media file. This could give an attacker complete control of the system if the user has administrative rights, enabling them to install programs, view, change, or delete data, or create new accounts. Users with fewer user rights may be less impacted.

Recommendations For Microsoft Windows versions prior to the fixed version, apply the necessary patch to resolve the buffer overflow issue in msvcrt.dll. As a temporary workaround, consider restricting the use of Microsoft Windows Media Player to minimize the risk of exploitation.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-0150

ZDI-12-034

Produtos afetados

Windows

Windows Media Player

Msvcrt.Dll

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2012-0150 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-013 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14631 · Nota
• http://us-cert.gov/cas/techalerts/TA12-045A.html · Nota
• https://zerodayinitiative.com/advisories/ZDI-12-034 · Nota de Segurança
• http://technet.microsoft.com/en-us/security/bulletin/ms12-013 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0150 · Nota de Segurança