exploits , vulnerabilities , articles , Microsoft Windows Media Player MIDI File MThd Header Parsing Denial of Service Vulnerability

Title	Microsoft Windows Media Player MIDI File MThd Header Parsing Denial of Service Vulnerability
Published	2008-11-03-12:00AM
Updated	2008-11-03-09:35PM
Class	Failure to Handle Exceptional Conditions
CVE
Remote	Yes
Local	No
Credit	Cn4phux
Vulnerable	Microsoft Windows Media Player 9.0 Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Web Edition Microsoft Windows Media Player 11 Microsoft Windows Media Player 10.0
Not Vulnerable
Code	To exploit this issue, an attacker must entice an unsuspecting user to open a maliciously crafted DAT file.The following proof-of-concept DAT or MIDI file generator is available: /data/vulnerabilities/exploits/32077.py
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-17 Digital Scribe Cross Site Scripting and SQL Injection Vulnerabilities
• 2009-12-17 WP-Forum WordPress Plugin Multiple SQL Injection Vulnerabilities
• 2009-12-17 Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability
• 2009-12-17 IntelliCom NetBiter webSCADA Multiple Default Password Security Bypass Vulnerabilities
• 2009-12-17 Webmatic Multiple Unspecified SQL Injection and Cross-Site Scripting Vulnerabilities
• 2009-12-17 ManageEngine Password Manager Pro Cross Site Scripting Vulnerability
• 2009-12-17 HP OpenView Storage Data Protector Multiple Remote Code Execution Vulnerabilities
• 2009-12-17 iDevSpot iSupport Multiple Cross Site Scripting Vulnerabilities
• 2009-12-17 GNU Automake Insecure Directory Permissions Vulnerability
• 2009-12-17 Mozilla Firefox CVE-2009-3979 Multiple Remote Memory Corruption Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Thu, 17 Dec 2009 22:27:14 +0000