Re: Microsoft Media Player ASX Parser buffer overflow vulnerability

2001-05-12T00:00:00
ID SECURITYVULNS:DOC:1598
Type securityvulns
Reporter Securityvulns
Modified 2001-05-12T00:00:00

Description

I found yet another bof condition in the ASX VERSION tag : an *.ASX file with the contents :

<ASX VERSION="AAAAAAAAAAA ... AAAAAAA">

crashes MPLAYER 6.4 in dxmasf.dll...

greetz, [ByteRage] <byterage@yahoo.com> http://elf.box.sk/byterage

> REVELATION: > > HREF attribute of BANNER tag can be abused to smash > our lovely stack. > > This information applies to Media Player 6.4 at > least.


Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/