PT-2012-2229 · Microsoft · Windows Media Player+5

Published 2012-01-10 · Updated 2024-10-17 · CVE-2012-0003

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Media Player versions in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2

Description A remote code execution issue exists in Windows Media Player, allowing attackers to execute arbitrary code via a crafted MIDI file. This could enable an attacker to take complete control of an affected system.

Recommendations For Windows Media Player in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, consider disabling the playback of MIDI files in Windows Media Player until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2012-0003

Affected Products

Server 2003

Server 2008

Vista

Windows

Windows Media Player

Windows Xp

References · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms12_004_midi.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18426 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0003 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-004 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0003 · Security Note
• http://securitytracker.com/id?1026492 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14337 · Note
• http://us-cert.gov/cas/techalerts/TA12-010A.html · Note
• https://t.me/cvenotify/98658 · Telegram Post
• http://technet.microsoft.com/en-us/security/bulletin/MS12-004 · Note
• http://securityfocus.com/bid/51292 · Note
• http://secunia.com/advisories/47485 · Note