Malformed Windows Media Encoder Request Vulnerability

A security vulnerability exists in Microsoft® Windows® Media Encoder, which ships as a component of the Windows Media Technologies which could allow a malicious user to interfere with a digital content provider's ability to supply real-time audio and video broadcasts.

Issue

Windows Media Encoder a component of the Windows Media Tools, which are part of the Windows Media Technologies. Windows Media Encoder is used to convert digital content into Windows Media Format for distribution by Windows Media Services in Windows NT and Windows 2000 Server. If a request with a particular malformation were sent to an affected encoder, it could cause it to fail, thereby denying formatted content to the Windows Media Server.

This vulnerability would primarily affect streaming media providers that supply real-time broadcasts of streaming media - it would not prevent a Windows Media Server from distributing already-encoded data. The vulnerability cannot be used to cause a machine to crash, nor can it be used to usurp any administrative privileges. Simply locating the server could be a challenge, because the IP address of the Windows Media Encoder would typically not be advertised.

Affected Products

• Microsoft Windows Media Encoder 4.0 & 4.1

Download

Patch: http://www.microsoft.com/Downloads/Release.asp?ReleaseID=21904

Further Details

Source: Microsoft Corporation

Reference: Microsoft Corporation

Updated: June 20, 2000

>> Recommended Download - secure your PC from spyware, adware and malware now with Spyware Doctor <<