PT-2012-2352 · Microsoft · Windows Media Player+2

Alexander Gavrun · Published 2012-02-14 · Updated 2023-12-07 · CVE-2012-0150

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description A buffer overflow issue exists in the way the msvcrt DLL calculates buffer size, allowing remote code execution when a user opens a specially crafted media file. This could give an attacker complete control of the system if the user has administrative rights, enabling them to install programs, view, change, or delete data, or create new accounts. Users with fewer user rights may be less impacted.

Recommendations For Microsoft Windows versions prior to the fixed version, apply the necessary patch to resolve the buffer overflow issue in msvcrt.dll. As a temporary workaround, consider restricting the use of Microsoft Windows Media Player to minimize the risk of exploitation.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-0150

ZDI-12-034

Affected Products

Windows

Windows Media Player

Msvcrt.Dll

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2012-0150 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-013 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-12-034 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0150 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14631 · Note
• http://us-cert.gov/cas/techalerts/TA12-045A.html · Note
• http://technet.microsoft.com/en-us/security/bulletin/ms12-013 · Note