PT-2004-2530 · Microsoft · Windows Xp

Published 2004-10-22 · Updated 2017-07-11 · CVE-2004-1623

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Windows XP SP1

Description The issue concerns a denial of service that can be triggered by a WAV file with a specifically crafted invalid file header. This header has its fmt chunk length set to 0xFFFFFFFF, causing an infinite loop in Explorer when processed.

Recommendations For Windows XP SP1, consider avoiding the use of WAV files with potentially invalid headers to prevent the denial of service. As a temporary workaround, restrict access to WAV files from untrusted sources until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-1623

Affected Products

Windows Xp

References · 8

• 🔥 http://securityfocus.com/bid/11503 · Exploit
• 🔥 https://exploit-db.com/exploits/24699 · Exploit
• 🔥 http://hexview.com/docs/20041021-1.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1623 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17864 · Note
• http://osvdb.org/11053 · Note
• http://marc.info/?l=bugtraq&m=109846319313443&w=2 · Note
• http://securitytracker.com/id?1011880 · Note