Description
QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value.
References
- 17160 third-party-advisory
- oval:org.mitre.oval:def:1267 vdb-entry signature
- AD20051011a third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf
- VU#995220 third-party-advisory
- oval:org.mitre.oval:def:1149 vdb-entry signature
- 18822 vdb-entry
- MS05-050 vendor-advisory
- 17172 third-party-advisory
- 17509 third-party-advisory
- oval:org.mitre.oval:def:1434 vdb-entry signature
- oval:org.mitre.oval:def:1424 vdb-entry signature
- oval:org.mitre.oval:def:1231 vdb-entry signature
- TA05-284A third-party-advisory
- 15063 vdb-entry