HTTP: Windows Media Player BMP Overflow (3)

This signature detects malformed BMP's opened by Windows Media Player. Windows Media Player is vulnerable to a buffer overflow.

Extended Description

Microsoft Windows Media Player is prone to a remote buffer-overflow vulnerability. The vulnerability arises when the application handles a skin file containing a specially crafted bitmap image. This issue can also be triggered by just supplying a malicious bitmap to the application. Note, however, that Windows Media Player is not the default handler for bitmap files. A successful attack can corrupt process memory and result in arbitrary code execution. This may facilitate a remote compromise in the context of the vulnerable user.

Affected Products

Nortel_networks mcs_5100

References

BugTraq: 16633

CVE: CVE-2006-0006

Short Name

HTTP:STC:IE:WMP-BMP-OF-3

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Windows Media Player BMP Overflow (3)

Extended Description

Affected Products

References

Found a potential security threat?