Description
Buffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to execute arbitrary code via an .MP3 or .WMA audio file with a corrupt custom attribute, aka "Unchecked Buffer in Windows Shell Could Enable System Compromise."
References
- VU#591890 third-party-advisory
- 20021219 Foundstone Research Labs Advisory - Exploitable Windows XP Media Files mailing-list
- 6427 vdb-entry
- winxp-windows-shell-bo(10892) vdb-entry
- CA-2002-37 third-party-advisory
- MS02-072 vendor-advisory