Title: Microsoft Windows Media Player Remote Skin Decompression Code Execution Vulnerability
Severity: HIGH
Description:
Microsoft Windows Media Player is a multimedia application available for the Microsoft Windows operating system.
Microsoft Windows Media Player is prone to a remote code-execution vulnerability when handling specially crafted compressed skin files.
Specifically, when attempting to apply malformed skin files, the application fails when decompressing specially-crafted files.
When the sizes of the compressed and uncompressed versions of the file don't match, an insufficiently sized heap-based memory buffer may be allocated. Subsequent memory copy operations may allow attacker-supplied memory to overwrite critical heap control structures. This corrupts memory in a way that allows attackers to execute code.
Attackers exploit this issue by coercing unsuspecting users to download and open Windows Media Player skin files (WMZ or WMD files). Note that users must attempt to apply the skin files.
Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. This facilitates the remote compromise of affected computers.
Affected Products:
- Avaya CIE 1.0
- Avaya CIE 1.0.2
- Avaya Customer Interaction Express (CIE) Server 1.0
- Avaya Customer Interaction Express (CIE) User Interface 1.0
- Avaya Customer Interaction Express (CIE) User Interface 1.0.2
- Microsoft Windows Media Player 10.0
- Microsoft Windows Media Player 11
- Microsoft Windows Media Player 7.1.0
- Microsoft Windows Media Player 9.0
- Microsoft Windows Server 2003 Datacenter Edition
- Microsoft Windows Server 2003 Datacenter Edition Itanium
- Microsoft Windows Server 2003 Enterprise Edition
- Microsoft Windows Server 2003 Enterprise Edition Itanium
- Microsoft Windows Server 2003 Standard Edition
- Microsoft Windows Server 2003 Web Edition
References:
- Avaya: ASA-2007-358: MS07-047 Vulnerability in Windows Media Player Could Allow Remote
- Microsoft: Microsoft Security Bulletin MS07-047
- Microsoft: Windows Media Player Product Homepage
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
