Windows Media Player .ASX Processor Contains Unchecked Buffer New

A security vulnerability exists in the Media Players ASX codec processor which could allow a user to run the code of their choice on a machine by ustilizing a buffer overrun.

Issue

Windows Media Player supports the use of .asx files so you can play streaming media that resides on intranet or Internet sites. However, the code that parses .asx files has an unchecked buffer, and this could potentially enable a malicious user to run code on another user's computer. The attacker could either send an affected file to another user and entice the user to run or preview it, or the attacker could host such a file on a Web site and cause it to start automatically whenever a user visited the site. The code could take any action on the computer that the legitimate user could take.

Affected Products

• Windows Media Player 6.4 & 7.0

Solution

Affected users are suggested to upgrade to Media Player 7.1

Further Details

Source: Microsoft Corporation

Reference: Microsoft Corporation

Updated: May 23, 2001

>> Recommended Download - secure your PC from spyware, adware and malware now with Spyware Doctor <<