exploits , vulnerabilities , articles , Microsoft Windows Media Format Runtime ASF File Remote Code Execution Vulnerability

Title	Microsoft Windows Media Format Runtime ASF File Remote Code Execution Vulnerability
Published	2007-12-11-12:00AM
Updated	2007-12-21-03:21AM
Class	Boundary Condition Error
CVE	CVE-2007-0064
Remote	Yes
Local	No
Credit	Ryan Smith and Alex Wheeler, IBM Internet Security Systems X-Force Researchers, of ISS X-Force is credited with the discovery of this issue.
Vulnerable	Microsoft Windows Media Services 9.1 x64 Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Standard Edition Microsoft Windows Media Services 9.1 Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Standard Edition Microsoft Windows Media Format 9.5 x64 Microsoft Windows Media Format 9.5 Microsoft Windows Media Format 9.0 Microsoft Windows Media Format 7.1 Microsoft Windows Media Format 11 HP Storage Management Appliance III HP Storage Management Appliance II HP Storage Management Appliance I HP Storage Management Appliance 2.1 HP Storage Management Appliance III HP Storage Management Appliance II HP Storage Management Appliance I Avaya Messaging Application Server MM 3.1 Avaya Messaging Application Server MM 3.0 Avaya Messaging Application Server MM 2.0 Avaya Messaging Application Server MM 1.1 Avaya Messaging Application Server 0
Not Vulnerable
Code	Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.A proof-of-concept exploit module is available for members of the Immunity Partners Program:https://www.immunityinc.com/downloads/immpartners/ms07_068.py
TXT

Vulnerabilities - newest 10 RSS | More

2008-11-22 KVIrc URI Handler Remote Command Execution Vulnerability
2008-11-22 NVIDIA Cg Toolkit Installer Insecure Temporary File Creation Vulnerability
2008-11-22 TkUsr Insecure Temporary File Creation Vulnerability
2008-11-21 TAU Tuning and Analysis Utilities Insecure Temporary File Creation Vulnerabilities
2008-11-21 Maildirsync Insecure Temporary File Creation Vulnerability
2008-11-21 TkMan Insecure Temporary File Creation Vulnerability
2008-11-21 Apple iPhone Configuration Web Utility for Windows Directory Traversal Vulnerability
2008-11-21 Cisco IOS and CatOS VLAN Trunking Protocol Packet Handling Denial Of Service Vulnerability
2008-11-21 vBulletin Visitor Messages Addon Comment Notification HTML Injection Vulnerability
2008-11-21 Apple Mac OS X CoreGraphics Multiple Memory Corruption Vulnerabilities