Signature Detail

RTSP: Malformed RTSP Stream

This signature detects attempts to exploit a known vulnerability in the Microsoft Media Player Network Sharing Service. By default, Internet access to home media is disabled. In this default configuration, the vulnerability can be exploited only by computers within the same subnet. A successful attack can result in arbitrary code execution.

Extended Description

The Microsoft Windows Media Player Network Sharing Service is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in context of the NetworkService account. Failed exploit attempts will likely result in denial-of-service conditions.

Affected Products

• Microsoft Windows 7 for 32-bit Systems
• Microsoft Windows 7 for x64-based Systems
• Microsoft Windows 7 Home Premium
• Microsoft Windows 7 Professional
• Microsoft Windows 7 Starter
• Microsoft Windows 7 Ultimate
• Microsoft Windows 7 XP Mode
• Microsoft Windows Vista Business SP1
• Microsoft Windows Vista Business SP2
• Microsoft Windows Vista Enterprise SP1
• Microsoft Windows Vista Enterprise SP2
• Microsoft Windows Vista Home Basic SP1
• Microsoft Windows Vista Home Basic SP2
• Microsoft Windows Vista Home Premium SP1
• Microsoft Windows Vista Home Premium SP2
• Microsoft Windows Vista SP1
• Microsoft Windows Vista SP2
• Microsoft Windows Vista Ultimate SP1
• Microsoft Windows Vista Ultimate SP2
• Microsoft Windows Vista Business 64-bit edition SP1
• Microsoft Windows Vista Business 64-bit edition SP2
• Microsoft Windows Vista Enterprise 64-bit edition SP1
• Microsoft Windows Vista Enterprise 64-bit edition SP2
• Microsoft Windows Vista Home Basic 64-bit edition SP1
• Microsoft Windows Vista Home Basic 64-bit edition SP2
• Microsoft Windows Vista Home Premium 64-bit edition SP1
• Microsoft Windows Vista Home Premium 64-bit edition SP2
• Microsoft Windows Vista Ultimate 64-bit edition SP1
• Microsoft Windows Vista Ultimate 64-bit edition SP2
• Microsoft Windows Vista x64 Edition SP1
• Microsoft Windows Vista x64 Edition SP2

References

• BugTraq: 43776
• CVE: CVE-2010-3225