Two vulnerabilities have been reported in Microsoft Windows Media Format, which can be exploited by malicious people to compromise a vulnerable system.

1) An error exists in the handling of ASF file headers and can be exploited to trigger an invalid call to freed memory e.g. via a specially crafted file or specially crafted streaming content from a web site.

2) An error in the processing of MP3 meta-data can be exploited to corrupt memory e.g. via a specially crafted MP3 file or specially crafted streaming content from a web site.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) The vendor credits Peter Winter-Smith, NGS Software.
2) Hiroshi Noguchi of the Alice Carroll fan club, reported via JPCERT/CC

Changelog
Further details available in Customer Area

Original Advisory
MS09-047 (KB973812, KB968816, KB972554):
http://www.microsoft.com/technet/security/Bulletin/MS09-047.mspx

JVN:
http://jvn.jp/en/jp/JVN62211338/index.html

Deep Links
Links available in Customer Area