Secunia

eEye Digital Security has reported a vulnerability in Windows Media Player, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error within the processing of bitmap files (.bmp) and can be exploited to cause a heap-based buffer overflow via a specially crafted bitmap file that declares its size as 0.

Successful exploitation allows execution of arbitrary code when a user e.g. visits a malicious web site, opens a malicious bitmap file (Windows Media Player is not the default handler for bitmap files), or opens a file (e.g. Word document) containing a malicious Windows Media Player (.wmp) image.

The following supported products and product combinations are NOT vulnerable:
* Windows Media Player 6.4
* Windows Media Player 10 on Windows Server 2003 SP1
* Windows XP Professional x64 Edition
* Windows Server 2003 (with or without SP1) for Itanium-based systems
* Microsoft Windows Server 2003 x64 Edition

Solution
Apply patch.
Further details available in Customer Area

Provided and/or discovered by
Fang Xing, eEye Digital Security.

Changelog
Further details available in Customer Area

Original Advisory
MS06-005 (KB911565):
http://www.microsoft.com/technet/security/Bulletin/MS06-005.mspx

eEye Digital Security:
http://www.eeye.com/html/research/advisories/AD20060214.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area