Secunia

Two vulnerabilities have been reported in various Microsoft products, which can be exploited by malicious people to compromise a vulnerable system.

1) Microsoft has acknowledged a vulnerability in Windows Messenger and MSN Messenger when processing PNG image files. This can be exploited to execute arbitrary code on a user's system via a specially crafted PNG image file.

For more information:
SA12219

2) A variant of the first vulnerability exists in Windows Media Player when processing PNG image files containing extremely large width and height values. This can be exploited to execute arbitrary code on a user's system via a specially crafted PNG image when the user e.g visits a malicious web site.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) Juliano Rizzo of Core Security Technologies reported the vulnerability in MSN Messenger.
2) Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
MS05-009 (KB890261):
http://www.microsoft.com/technet/security/bulletin/ms05-009.mspx

Core Security Technologies:
http://www.coresecurity.com/common/showdoc.php?idx=421&idxseccion=10

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area