Signature Detail
Short Name |
HTTP:STC:DL:MAL-WMV-MEDIA |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Windows Media Player Malformed Media Player File Code Execution |
Release Date |
2010/10/11 |
Update Number |
1790 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Windows Media Player Malformed Media Player File Code Execution
This signature detects attempts to exploit a known vulnerability in Microsoft Media Player. A successful attack can result in arbitrary code execution with the privileges of the targeted user.
Extended Description
Microsoft Windows Media Player is prone to a remote code-execution vulnerability when handling specially crafted media content. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code in the context of the user running the application, which can compromise the application and possibly the computer. The issue affects the following: Windows Media Player 9 series Windows Media Player 10 Windows Media Player 11 Windows Media Player 12
Affected Products
- Avaya Aura Conferencing Standard
- Avaya CallPilot
- Avaya Communication Server 1000 Telephony Manager
- Avaya Meeting Exchange - Client Registration Server
- Avaya Meeting Exchange - Recording Server
- Avaya Meeting Exchange - Streaming Server
- Avaya Meeting Exchange - Web Conferencing Server
- Avaya Meeting Exchange - Webportal
- Avaya Messaging Application Server
- Microsoft Windows Media Player 10.0
- Microsoft Windows Media Player 11
- Microsoft Windows Media Player 12
- Microsoft Windows Media Player 9.0
References
- BugTraq: 43772
- CVE: CVE-2010-2745