OSVDB ID: 36386

Title: Microsoft Windows Media Player Skin File Handling Crafted Header Arbitrary Code Execution

Info

Disclosure

Aug 14, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Aug 14, 2007

Description

Classification

Location: Remote / Network Access, Context Dependent
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Private
Disclosure: Vendor Verified, Coordinated Disclosure

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

Products

Unknown or Incomplete

References

Security Tracker: 1018565
OVAL ID: 1352
CVE ID: 2007-3035 (see also: NVD)
Bugtraq ID: 25305
Secunia Advisory ID: 26433
SCIP VulDB ID: 3246
ISS X-Force ID: 35895
Related OSVDB ID: 36385
Microsoft Knowledge Base Article: 936782
VUPEN Advisory: ADV-2007-2871
Keyword: aka "Windows Media Player Code Execution Vulnerability Decompressing Skins"
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-08/0217.html
http://www.securityfocus.com/archive/1/archive/1/476548/100/0/threaded
News Article: http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=security&articleId=9030696
Other Advisory URL: http://www.zerodayinitiative.com/advisories/ZDI-07-047.html
Microsoft Security Bulletin: MS07-047
CERT: TA07-226A

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/36386