PT-2008-6103 · Microsoft · Windows Media Player

Published 2008-11-04 · Updated 2008-11-05 · CVE-2008-4927

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Player versions 9.0 through 11

Description The issue allows user-assisted attackers to cause a denial of service, resulting in an application crash, via a malformed MIDI or DAT file. This is related to MThd Header Parsing.

Recommendations For versions 9.0 through 11, avoid using the affected Microsoft Windows Media Player to open MIDI or DAT files from untrusted sources until a fix is available. As a temporary workaround, consider restricting the use of MIDI and DAT file playback in Microsoft Windows Media Player to minimize the risk of exploitation.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-4927

Affected Products

Windows Media Player

References · 3

• 🔥 http://securityfocus.com/data/vulnerabilities/exploits/32077.py · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4927 · Security Note
• http://securityfocus.com/bid/32077 · Note