BugTraq
Back to list
|
Post reply
Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability
May 14 2007 09:49PM
Michal Bucko (hackpl) (sapheal hack pl)
(1 replies)
Synopsis: Media Player Classic .MPA Div-By-Zero Denial of Service
Vulnerability
Vulnerable: Media Player Classic 6.4.9.0
Author: Michal Bucko
Introduction
A multimedia player with a similar interface to Microsoft Windows Media
Player 6.4, but has many
more features specific for DivX playback.
Description
Media Player Classic fails to handle MPA-extension media files. When empty
file provided Media Player
Classic fails to properly parse MPA file format.
00634DD1 |. 8B4C24 18 MOV ECX,DWORD PTR SS:[ESP+18]
00634DD5 |. 8B4424 14 MOV EAX,DWORD PTR SS:[ESP+14]
00634DD9 |. 33D2 XOR EDX,EDX
00634DDB |. F7F1 DIV ECX
ECX 00000000
[ reply ]
Re: Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability
May 16 2007 03:31PM
3APA3A (3APA3A SECURITY NNOV RU)
(1 replies)
Re: Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability
May 16 2007 03:53PM
Michal Bucko (hackpl) (sapheal hack pl)
Privacy Statement
Copyright 2010, SecurityFocus
Vulnerability
Vulnerable: Media Player Classic 6.4.9.0
Author: Michal Bucko
Introduction
A multimedia player with a similar interface to Microsoft Windows Media
Player 6.4, but has many
more features specific for DivX playback.
Description
Media Player Classic fails to handle MPA-extension media files. When empty
file provided Media Player
Classic fails to properly parse MPA file format.
00634DD1 |. 8B4C24 18 MOV ECX,DWORD PTR SS:[ESP+18]
00634DD5 |. 8B4424 14 MOV EAX,DWORD PTR SS:[ESP+14]
00634DD9 |. 33D2 XOR EDX,EDX
00634DDB |. F7F1 DIV ECX
ECX 00000000
[ reply ]