CVE-2007-4288

published 2007-08-09

CVE-2007-4288: Microsoft Windows Media Player 11 (wmplayer.exe) allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted .au file…

Priority P4 14 medium 4.3 CVSS 2.0

AV N AC M Au N C N I N A P

EXPLOIT

Microsoft Windows Media Player 11 (wmplayer.exe) allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted .au file that triggers a divide-by-zero error, as demonstrated by iapetus.au.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
microsoft	windows_media_player	—	—

Detection & IOCs extracted from sources · hover to see the quote

filename iapetus.au↗

process wmplayer.exe↗

url https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30462-1.au↗

• → Malicious .au file triggering the vulnerability begins with the magic bytes '.snd' (0x2E 0x73 0x6E 0x64) followed by a crafted header that sets a zero sample rate field (0x00 0x00 0x00 0x00 at offset 0x10), causing a divide-by-zero in wmplayer.exe when the file is opened. ↗
• → Monitor wmplayer.exe for crashes (access violation / divide-by-zero exception) when processing .au files, particularly files with the filename 'iapetus.au' or files whose AU header contains a zero value at the sample-rate field. ↗
• → The exploit-generated file ends with the trailing bytes 0x66 0x66 0x66 0x00 after a large block of null-padded data; this distinctive tail combined with the crafted .snd header can be used as a file-based signature. ↗

• · The vulnerability is user-assisted; the victim must open the crafted .au file with Windows Media Player 11. Other versions of WMP may also be affected but are not confirmed. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.