Secunia

iDefense Labs has reported a vulnerability in Windows Media Player, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error within the decoding of PNG (Portable Network Graphics) image file chunks. This can be exploited to cause a stack-based buffer overflow via a specially crafted PNG image when a user opens a malicious WMZ file or visits a malicious web site.

Successful exploitation allows execution of arbitrary code.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Greg MacManus, iDefense Labs.

Changelog
Further details available in Customer Area

Original Advisory
MS06-024 (KB917734):
http://www.microsoft.com/technet/security/Bulletin/MS06-024.mspx

iDefense Labs:
http://idefense.com/intelligence/vulnerabilities/display.php?id=406

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area