Windows Media Player Contains Unchecked Buffer New

An unchecked buffer vulnerability exists in the media player .NSC Processor which could allow a malicious user to run code of their choice on a vulnerable machine.

Issue

Windows Media Player provides support for audio and video streaming. Streaming media channels can be configured by using Windows Media Station (.NSC) files. An unchecked buffer exists in the functionality used to process Windows Media Station files. This unchecked buffer could potentially allow an attacker to run code of his choice on the machine of another user. The attacker could either send a specially malformed file to another user and entice her to run or preview it, or he could host such a file on a web site and cause it to launch automatically whenever a user visited the site. The code could take any action on the machine that the legitimate user himself could take.

Affected Products

• Windows Media Player 6.4, 7, or 7.1

Solution

Windows Media Player 6.4 users should upgrade to Windows Media Player 7.1 or download the patch below.

Windows Media Player 7.0 users should upgrade to Windows Media Player 7.1 and install the patch below.

Windows Media Player 7.1 should install the patch below.

Software patches are available from:

• Windows Media Player 6.4
• Windows Media Player 7.1

Further Details

Source: Microsoft Corporation

Reference: Microsoft Corporation

Updated: July 26, 2001

>> Recommended Download - secure your PC from spyware, adware and malware now with Spyware Doctor <<