Two vulnerabilities have been reported in Windows Media Player, which can be exploited by malicious people to compromise a user's system.

1) An error in the parsing of header information in skin files can be exploited to execute arbitrary code on a user's system by tricking the user into visiting a malicious website or opening a malicious skin file.

2) An error in the decompression of skin files can be exploited to execute arbitrary code on a user's system by tricking the user into visiting a malicious website or opening a malicious skin file.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Discovered by Piotr Bania and reported via ZDI.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS07-047 (KB936782):
http://www.microsoft.com/technet/security/Bulletin/MS07-047.mspx

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-07-046.html
http://www.zerodayinitiative.com/advisories/ZDI-07-047.html

Deep Links
Links available to Secunia VIM customers