Secunia

Arman Nayyeri has discovered two vulnerabilities in Microsoft Windows Media Player, which can be exploited by malicious people to disclose system information, and modify or disclose some sensitive information.

1) An error in the "getItemInfoByAtom()" function in the Windows Media Player ActiveX control can be exploited by e.g. a malicious web site to determine the presence and size of local files.

2) Some errors in the "setItemInfo()" and "getItemInfo()" functions in the Windows Media Player ActiveX control can be exploited by e.g. a malicious web site to modify or disclose local media information (e.g. artist, album, and song name of a .wma file).

The vulnerabilities have been confirmed on a fully patched system with Microsoft Windows Media Player 9 and Microsoft Windows 2000 SP4 / XP SP1 / XP SP2.

Solution
Microsoft Windows XP:
Further details available in Customer Area

Provided and/or discovered by
Arman Nayyeri

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area