(cache) Microsoft DirectShow AVI File Parsing Buffer Overflow Vulnerability - Advisories

Community

Community Login

Register now
Forgot password?

Secunia Advisory SA38511

Microsoft DirectShow AVI File Parsing Buffer Overflow Vulnerability

Secunia Advisory	SA38511
Release Date	2010-02-09
Last Update	2010-02-10

Popularity	2,312 views

Criticality level	Highly critical
Impact	System access
Where	From remote
Authentication level	Available in Customer Area

Report reliability	Available in Customer Area
Solution Status	Vendor Patch

Secunia PoC	Available in Customer Area
Secunia analysis	Available in Customer Area

Systems affected	Available in Customer Area
Approve distribution	Available in Customer Area

Operating System	Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Professional Microsoft Windows 2000 Server Microsoft Windows 7 Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2008 Microsoft Windows Storage Server 2003 Microsoft Windows Vista Microsoft Windows XP Home Edition Microsoft Windows XP Professional

Software:	Microsoft DirectX 10.x Microsoft DirectX 9.x

Secunia CVSS Score	Available in Customer Area
CVE Reference(s)	CVE-2010-0250 CVSS available in Customer Area

Description
A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error when decompressing a specific type of video stream in an AVI file and can be exploited to cause a heap-based buffer overflow.

Successful exploitation allows execution of arbitrary code.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
An anonymous person, reported via ZDI.

Changelog
Further details available in Customer Area

Original Advisory
MS10-013 (KB977935, KB977914, KB975560):
http://www.microsoft.com/technet/security/Bulletin/MS10-013.mspx

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-10-015/

Deep Links
Links available in Customer Area