CVE-2007-3037 - Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player Code Execution Vulnerability Parsing Skins."

Back Back to CVE browser

MEDIUM

Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player Code Execution Vulnerability Parsing Skins."

Published Aug 14, 2007

4.0

MEDIUM

CVSS 2.0

EPSS 21.82%

Description

Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player Code Execution Vulnerability Parsing Skins."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-94

Code Injection

References (11)

http://secunia.com/advisories/26433
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1018565
vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/36385
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/476533/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/25307
vdb-entryx_refsource_BID
http://www.us-cert.gov/cas/techalerts/TA07-226A.html
third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2007/2871
vdb-entryx_refsource_VUPENVendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-07-046.html
x_refsource_MISC
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-047
vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-3029
Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2207
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://secunia.com/advisories/26433		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1018565		vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/36385		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/476533/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/25307		vdb-entryx_refsource_BID
http://www.us-cert.gov/cas/techalerts/TA07-226A.html		third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2007/2871		vdb-entryx_refsource_VUPENVendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-07-046.html		x_refsource_MISC
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-047		vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-3029		Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2207		vdb-entrysignaturex_refsource_OVAL