Description
Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX file, or (2) a long banner tag, a variant of the ".ASX Buffer Overrun" vulnerability as discussed in MS:MS00-090.
References
- VU#187528 third-party-advisory
- mediaplayer-asx-bo(5574) vdb-entry
- 20010502 Microsoft Media Player ASX Parser buffer overflow vulnerability mailing-list
- 2686 vdb-entry
- 2677 vdb-entry
- 20010506 Re: Microsoft Media Player ASX Parser buffer overflow vulnerability mailing-list
- MS01-029 vendor-advisory