IBM X-Force has reported four vulnerabilities in Windows Media Format Runtime / Windows Media Services, which can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to boundary errors when parsing ASF (Advanced Systems Format) files and can be exploited to cause heap-based buffer overflows when a user views a specially crafted ASF file in an application using the component (e.g. Windows Media Player).

Successful exploitation may allow execution of arbitrary code.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Ryan Smith and Alex Wheeler, IBM X-Force.

Changelog
Further details available in Customer Area

Original Advisory
MS07-068 (KB941569 / KB944275):
http://www.microsoft.com/technet/security/Bulletin/MS07-068.mspx

IBM X-Force:
http://www.iss.net/threats/279.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area