Signature Detail

HTTP: Microsoft Windows Media Player DVR-MS File Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft Windows Media Player. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Windows Media Player and Windows Media Center are prone to a remote code-execution vulnerability when handling specially crafted media content. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage or a specially crafted file. Successful exploits will allow the attacker to execute arbitrary code in the context of the user running the application, which can compromise the application and possibly the computer.

Affected Products

• Microsoft windows_7_for_32-bit_systems SP1
• Microsoft windows_7_for_32-bit_systems
• Microsoft windows_7_for_x64-based_systems SP1
• Microsoft windows_7_for_x64-based_systems
• Microsoft windows_7_home_premium
• Microsoft windows_7_professional
• Microsoft windows_7_ultimate
• Microsoft windows_media_center_tv_pack_for_windows_vista_32-bit_edition
• Microsoft windows_media_center_tv_pack_for_windows_vista_64-bit_edition
• Microsoft windows_vista Enterprise
• Microsoft windows_vista Enterprise SP1
• Microsoft windows_vista Enterprise SP2
• Microsoft windows_vista Home Basic
• Microsoft windows_vista Home Basic SP1
• Microsoft windows_vista Home Basic SP2
• Microsoft windows_vista Home Premium
• Microsoft windows_vista Home Premium SP1
• Microsoft windows_vista Home Premium SP2
• Microsoft windows_vista SP1
• Microsoft windows_vista SP2
• Microsoft windows_vista Ultimate
• Microsoft windows_vista Ultimate SP1
• Microsoft windows_vista Ultimate SP2
• Microsoft windows_vista_enterprise_64-bit_edition SP1
• Microsoft windows_vista_enterprise_64-bit_edition SP2
• Microsoft windows_vista_enterprise_64-bit_edition
• Microsoft windows_vista_home_basic_64-bit_edition SP1
• Microsoft windows_vista_home_basic_64-bit_edition Sp1 X64
• Microsoft windows_vista_home_basic_64-bit_edition SP2
• Microsoft windows_vista_home_basic_64-bit_edition Sp2 X64
• Microsoft windows_vista_home_basic_64-bit_edition
• Microsoft windows_vista_home_premium_64-bit_edition SP1
• Microsoft windows_vista_home_premium_64-bit_edition SP2
• Microsoft windows_vista_home_premium_64-bit_edition
• Microsoft windows_vista_ultimate_64-bit_edition SP1
• Microsoft windows_vista_ultimate_64-bit_edition SP2
• Microsoft windows_vista_ultimate_64-bit_edition
• Microsoft windows_xp - Gold 64-Bit-2002
• Microsoft windows_xp Gold Embedded
• Microsoft windows_xp - Gold Home
• Microsoft windows_xp Gold Media Center
• Microsoft windows_xp Gold Professional
• Microsoft windows_xp Gold Tablet Pc
• Microsoft windows_xp - Gold X64
• Microsoft windows_xp
• Microsoft windows_xp_embedded SP1
• Microsoft windows_xp_embedded SP2
• Microsoft windows_xp_embedded SP3
• Microsoft windows_xp_embedded
• Microsoft windows_xp_embedded_sp2_feature_pack_2007
• Microsoft windows_xp_gold
• Microsoft windows_xp_home SP1
• Microsoft windows_xp_home SP2
• Microsoft windows_xp_home SP3
• Microsoft windows_xp_home
• Microsoft windows_xp_media_center_edition SP1
• Microsoft windows_xp_media_center_edition SP2
• Microsoft windows_xp_media_center_edition SP3
• Microsoft windows_xp_media_center_edition
• Microsoft windows_xp_professional SP1
• Microsoft windows_xp_professional SP2
• Microsoft windows_xp_professional SP3
• Microsoft windows_xp_professional
• Microsoft windows_xp_professional_x64_edition SP2
• Microsoft windows_xp_professional_x64_edition
• Microsoft windows_xp_service_pack_3
• Microsoft windows_xp_tablet_pc_edition SP1
• Microsoft windows_xp_tablet_pc_edition SP2
• Microsoft windows_xp_tablet_pc_edition SP3
• Microsoft windows_xp_tablet_pc_edition

References

• BugTraq: 46680
• CVE: CVE-2011-0042