Description: Some vulnerabilities have been reported in Windows Media Format Runtime, which potentially can be exploited by malicious people to compromise a user's system.
1) A boundary error within the handling of "REF HREF" tags in ASX playlists can be exploited to cause a limited heap-based buffer overflow via an overly long string with an invalid URL.
2) A boundary error within the processing of Advanced Systems Format (ASF) files can be exploited to cause a buffer overflow via a specially crafted ASF file.
Successful exploitation of the vulnerabilities may allow execution of arbitrary code.
Solution: Upgrade to Windows Media Player 11 or apply patches.
-- Windows Media Format 7.1 through 9.5 Series Runtime --
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
