CVE-2005-2128 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2005-2128
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-2128

Description: QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value.

CVE Status: Candidate

References: VULNWATCH SAID Secunia Advisory: SA17160 Secunia Advisory: SA17172 Secunia Advisory: SA17509 OVAL http://oval.mitre.org/oval/definitions/data/oval1434.html http://oval.mitre.org/oval/definitions/data/oval1424.html http://oval.mitre.org/oval/definitions/data/oval1267.html http://oval.mitre.org/oval/definitions/data/oval1231.html http://oval.mitre.org/oval/definitions/data/oval1149.html OSVDB 18822 MS http://www.microsoft.com/technet/security/bulletin/MS05-050.mspx EEYE http://www.eeye.com/html/research/advisories/AD20051011a.html CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf CERT-VN 995220 CERT http://www.us-cert.gov/cas/techalerts/TA05-284A.html BID 15063

Return to the previous page.