CVE-2001-0242: Undefined Security Weakness

Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via 1 a long version tag in an .ASX file, or 2 a long banner tag, a variant of the ".ASX Buffer Overrun" vulnerability as discussed in MS:MS00-090...

Re: Microsoft Media Player ASX Parser buffer overflow vulnerability

I found yet another bof condition in the ASX VERSION tag : an .ASX file with the contents : ASX VERSION="AAAAAAAAAAA ... AAAAAAA" crashes MPLAYER 6.4 in dxmasf.dll... greetz, ByteRage [email protected] http://elf.box.sk/byterage REVELATION: HREF attribute of BANNER tag can be abused to smash our...