Security-Alerts mailing list archive (security-alerts@yandex-team.ru)
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[security-alerts] FW: [SA27998] 3ivx MPEG-4 MP4 File Processing Buffer Overflows
> The vulnerabilities are confirmed in version 5.0.1 with the following
> applications as attack vectors:
> * Windows Media Player version 6.4.09.1130 (mplayer2.exe)
> * Media Player Classic version 6.4.9.0
> ----------------------------------------------------------------------
>
> TITLE:
> 3ivx MPEG-4 MP4 File Processing Buffer Overflows
>
> SECUNIA ADVISORY ID:
> SA27998
>
> VERIFY ADVISORY:
> http://secunia.com/advisories/27998/
>
> CRITICAL:
> Highly critical
>
> IMPACT:
> System access
>
> WHERE:
> From remote
>
> SOFTWARE:
> 3ivx MPEG-4 5.x
> http://secunia.com/product/16851/
>
> DESCRIPTION:
> SYS 49152 has discovered some vulnerabilities in 3ivx MPEG-4, which
> can be exploited by malicious people to compromise a user's system.
>
> The vulnerabilities are caused due to boundary errors in
> 3ivxDSMediaSplitter.ax when processing certain atoms ("?art", "?nam",
> "?cmt", "?des", and "?cpy") in MP4 files and can be exploited to cause
> stack-based buffer overflows via a specially crafted MP4 file.
>
> Successful exploitation allows execution of arbitrary code.
>
> The vulnerabilities are confirmed in version 5.0.1 with the following
> applications as attack vectors:
> * Windows Media Player version 6.4.09.1130 (mplayer2.exe)
> * Media Player Classic version 6.4.9.0
>
> Other versions and applications may also be affected.
>
> SOLUTION:
> Do not open untrusted MP4 files.
>
> PROVIDED AND/OR DISCOVERED BY:
> SYS 49152
>
> ORIGINAL ADVISORY:
> milw0rm:
> http://www.milw0rm.com/exploits/4701
> http://www.milw0rm.com/exploits/4702
>
|
