• info
• discussion
• exploit
• solution
• references

Microsoft Windows Media Format ASF Header Invalid Free Memory Corruption Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.


Microsoft Windows Media Services 9.1

• Microsoft Security Update for Windows Server 2003 (KB972554)
  http://www.microsoft.com/downloads/details.aspx?familyid=61cd0581-c36e -4da6-ae95-41609adbe922


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB972554)
  http://www.microsoft.com/downloads/details.aspx?familyid=67c46f26-e6df -4ba2-9c03-1590b31e454c

Microsoft Windows Media Format 9.0

• Microsoft Security Update for Windows Media Format Runtime 9 for Windows 2000 (KB968816)
  http://www.microsoft.com/downloads/details.aspx?familyid=02b9dc42-38c2 -44b1-a77c-34854f4a86c4


• Microsoft Security Update for Windows Media Format Runtime 9, 9.5 & 11 for Windows XP SP 2 (KB968816)
  http://www.microsoft.com/downloads/details.aspx?familyid=6ffc081e-f892 -4818-acb9-6d79e15d473c


• Microsoft Security Update for Windows Media Format Runtime 9, 9.5 & 11 for Windows XP SP 3 (KB968816)
  http://www.microsoft.com/downloads/details.aspx?familyid=31585f5a-9aaa -40da-b15a-11284b4b800c

Microsoft Windows Media Format 11

• Microsoft Security Update for 32-bit Windows Media Format Runtime 11 for Windows XP x64 Edition (KB968816)
  http://www.microsoft.com/downloads/details.aspx?familyid=9a465f92-3067 -4a5a-9882-1fc2cf796c99


• Microsoft Security Update for Windows Media Format Runtime 11 for Windows Server 2008 (KB968816)
  http://www.microsoft.com/downloads/details.aspx?familyid=9c111bff-aff6 -4ff7-81f6-e736cfcbe3ed


• Microsoft Security Update for Windows Media Format Runtime 11 for Windows Server 2008 x64 Edition (KB968816)
  http://www.microsoft.com/downloads/details.aspx?familyid=59615c8b-a07f -4326-836d-f17b2fcc4695


• Microsoft Security Update for Windows Media Format Runtime 11 for Windows Vista (KB968816)
  http://www.microsoft.com/downloads/details.aspx?familyid=d2bdefcc-f6b9 -47c3-a55d-a4f33f967828


• Microsoft Security Update for Windows Media Format Runtime 11 for Windows Vista for x64-based Systems (KB96881
  http://www.microsoft.com/downloads/details.aspx?familyid=97f00b25-fb8f -4300-80c0-c63179f32182


• Microsoft Security Update for Windows Media Format Runtime 9, 9.5 & 11 for Windows XP SP 2 (KB968816)
  http://www.microsoft.com/downloads/details.aspx?familyid=6ffc081e-f892 -4818-acb9-6d79e15d473c


• Microsoft Security Update for Windows Media Format Runtime 9, 9.5 & 11 for Windows XP SP 3 (KB968816)
  http://www.microsoft.com/downloads/details.aspx?familyid=31585f5a-9aaa -40da-b15a-11284b4b800c

Microsoft Windows Media Services 2008

• Microsoft Security Update for Windows Server 2008 (KB972554)
  http://www.microsoft.com/downloads/details.aspx?familyid=2801f69b-37d0 -4d0f-9632-31382b824d36


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB972554)
  http://www.microsoft.com/downloads/details.aspx?familyid=7fad3793-174f -46db-9d0a-873a0ea8be65

Microsoft Windows Media Format 9.5 x64

• Microsoft Security Update for 64-bit Windows Media Format Runtime 9.5 for Windows XP x64 Edition and Windows S
  http://www.microsoft.com/downloads/details.aspx?familyid=ce515188-db3c -4694-85da-177c8f76b68c

Microsoft Windows Media Format 9.5

• Microsoft Security Update for 32-bit Windows Media Format Runtime 9.5 for Windows Server 2003 x64 Edition (KB9
  http://www.microsoft.com/downloads/details.aspx?familyid=8654ee33-6083 -447f-ae5b-43ef8d8b613d


• Microsoft Security Update for 32-bit Windows Media Format Runtime 9.5 for Windows XP x64 Edition (KB968816)
  http://www.microsoft.com/downloads/details.aspx?familyid=3780d565-d027 -4f54-8fc0-05f5c3c6ba1a


• Microsoft Security Update for Windows Media Format Runtime 9, 9.5 & 11 for Windows XP SP 2 (KB968816)
  http://www.microsoft.com/downloads/details.aspx?familyid=6ffc081e-f892 -4818-acb9-6d79e15d473c


• Microsoft Security Update for Windows Media Format Runtime 9, 9.5 & 11 for Windows XP SP 3 (KB968816)
  http://www.microsoft.com/downloads/details.aspx?familyid=31585f5a-9aaa -40da-b15a-11284b4b800c


• Microsoft Security Update for Windows Media Format Runtime 9.5 for Windows Server 2003 (KB968816)
  http://www.microsoft.com/downloads/details.aspx?familyid=4ab34e3d-34cb -4e35-a2da-b348ace8a8f7