Secunia

Description
A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a logic error in the bundled Movie Maker application within the "IsValidWMToolsStream()" function when parsing project files. This can be exploited to cause a buffer overflow when viewing a specially crafted file.

Successful exploitation allows execution of arbitrary code.

NOTE: Systems running Windows 7 do not bundle Movie Maker and are, therefore, not affected by default.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Damian Frizza, Core Security Technologies.

Changelog
Further details available in Customer Area

Original Advisory
MS10-016 (KB975561):
http://www.microsoft.com/technet/security/bulletin/ms10-016.mspx

Core Security:
http://www.coresecurity.com/content/movie-maker-heap-overflow

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area