HTTP: Windows Media Player BMP Overflow (3)
This signature detects malformed BMP's opened by Windows Media Player. Windows Media Player is vulnerable to a buffer overflow.
Extended Description
Microsoft Windows Media Player is prone to a remote buffer-overflow vulnerability. The vulnerability arises when the application handles a skin file containing a specially crafted bitmap image. This issue can also be triggered by just supplying a malicious bitmap to the application. Note, however, that Windows Media Player is not the default handler for bitmap files. A successful attack can corrupt process memory and result in arbitrary code execution. This may facilitate a remote compromise in the context of the vulnerable user.
Affected Products
Nortel_networks mcs_5100
Short Name
HTTP:STC:IE:WMP-BMP-OF-3
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
(3) BMP CVE-2006-0006 Media Overflow Player Windows bid:16633
Release Date
04/11/2006
Supported Platforms
mx-19.3
vmx-19.3
vsrx-19.2
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vmx-19.4
mx-19.4
srxevo-25.4
vsrx-26.2
srx-26.2
srx-branch-26.2
vsrx3bsd-26.2
mx-12.3
srx-12.3
srx-branch-12.3
vsrx-12.3
Sigpack Version
3724
False Positive
Unknown
Vendors
Nortel_networks
Microsoft
CVSS Score
9.3