• info
• discussion
• exploit
• solution
• references

Windows Media Player ASX PlayList File Heap Overflow Vulnerability

Solution:
Microsoft has released an advisory along with fixes to address this issue. Please see the references for more information.


Microsoft Windows Media Format 9.5

• Microsoft Security Update for Windows 2000 (KB923689)
  http://www.microsoft.com/downloads/details.aspx?familyid=ef2dbcb6-cc8e -4299-a1e6-e6db202b41d5


• Microsoft Security Update for Windows Media Format 9.5 Series x64 Edition (KB923689)
  http://www.microsoft.com/downloads/details.aspx?familyid=c5ece3cd-ac7b -46b4-99dc-74a6b0f323d0


• Microsoft Security Update for Windows Server 2003 (KB923689)
  http://www.microsoft.com/downloads/details.aspx?familyid=0cb64ad7-9b54 -4e26-9125-e9e9a0c0fc65


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB923689)
  http://www.microsoft.com/downloads/details.aspx?familyid=2203c66c-6722 -42d5-a7dc-ac5e71402542


• Microsoft Security Update for Windows XP (KB923689)
  http://www.microsoft.com/downloads/details.aspx?familyid=19ca4b44-2b60 -4270-9c42-f5063c627f91


• Microsoft Security Update for Windows XP x64 Edition (KB923689)
  http://www.microsoft.com/downloads/details.aspx?familyid=7322327f-abd9 -4595-98dd-a19ef41652fc

Microsoft Windows Media Player 6.4

• Microsoft Security Update for Windows Media Player 6.4 for Windows Server 2003 x64 Edition (KB925398)
  Microsoft Windows Server 2003 x64 Edition and Microsoft Windows Server 2003 x64 Edition Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?FamilyId=a4fca647-01b7 -4201-85e8-1647412742b0&displaylang=en


• Microsoft Security Update for Windows Media Player 6.4 for Windows XP x64 Edition (KB925398)
  Microsoft Windows XP Professional x64 Edition and Microsoft Windows XP Professional x64 Edition Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?FamilyId=a5240618-5975 -4ef2-9749-4cccddb786c7&displaylang=en


• Microsoft Security Update for Windows Media Player 6.4 for Windows (KB925398)
  http://www.microsoft.com/downloads/details.aspx?familyid=e63ccdc3-a2ed -4ef6-b8a1-3f8be4b2726d


• Microsoft Security Update for Windows Media Player 6.4 for Windows Server 2003 x64 Edition (KB925398)
  http://www.microsoft.com/downloads/details.aspx?familyid=a4fca647-01b7 -4201-85e8-1647412742b0


• Microsoft Security Update for Windows Media Player 6.4 for Windows XP x64 Edition (KB925398)
  http://www.microsoft.com/downloads/details.aspx?familyid=a5240618-5975 -4ef2-9749-4cccddb786c7