Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability May 14 2007 09:49PM
Michal Bucko (hackpl) (sapheal hack pl) (1 replies)
Synopsis: Media Player Classic .MPA Div-By-Zero Denial of Service
Vulnerability
Vulnerable: Media Player Classic 6.4.9.0

Author: Michal Bucko

Introduction

A multimedia player with a similar interface to Microsoft Windows Media
Player 6.4, but has many
more features specific for DivX playback.

Description

Media Player Classic fails to handle MPA-extension media files. When empty
file provided Media Player
Classic fails to properly parse MPA file format.

00634DD1 |. 8B4C24 18 MOV ECX,DWORD PTR SS:[ESP+18]
00634DD5 |. 8B4424 14 MOV EAX,DWORD PTR SS:[ESP+14]
00634DD9 |. 33D2 XOR EDX,EDX
00634DDB |. F7F1 DIV ECX

ECX 00000000

[ reply ]
Re: Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability May 16 2007 03:31PM
3APA3A (3APA3A SECURITY NNOV RU) (1 replies)
Re: Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability May 16 2007 03:53PM
Michal Bucko (hackpl) (sapheal hack pl)







 

Privacy Statement
Copyright 2009, SecurityFocus