12.346.2006 - MS06-078: Vulnerability in Windows Media Format Could Allow Remote Code Execution (923689)

Windows Media Format ASF Parsing Vulnerability - CVE-2006-4702 A remote code execution vulnerability exists in Windows Media Format Runtime due to the way it handles Advanced Systems Format (ASF) files. An attacker could exploit the vulnerability by constructing specially crafted Windows Media Player content that could potentially allow remote code execution if a user visits a malicious Web site or opens an e-mail message with malicious content. An attacker who successfully exploited this vulnerability could take complete control of an affected system. Windows Media Format ASX Parsing Vulnerability - CVE-2006-6134 A remote code execution vulnerability exists in Windows Media Format Runtime due to the way it handles certain elements contained in Advanced Stream Redirector (ASX) files. An attacker could exploit the vulnerability by constructing a specially crafted ASX file that could allow remote code execution if a user visits a malicious Web site, where specially crafted ASX files are used to launch Windows Media player, or if a user clicks on a URL pointing to a specially crafted ASX file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. Microsoft Windows Media Format 7.1 through 9.5 Series Runtime - Download Microsoft Windows 2000 SP4 - Download Microsoft Windows XP SP2 - Download Microsoft Windows XP Professional x64 - Download Microsoft Windows Server 2003 RTM/SP1 - Download Microsoft Windows Server 2003 x64 Microsoft Windows Media Format 9.5 Series Runtime x64 - Download Microsoft Windows XP Professional x64 - Download Microsoft Windows Server 2003 x64 Microsoft Windows Media Player 6.4 - Download Microsoft Windows 2000 SP4 - Download Microsoft Windows XP SP2 - Download Microsoft Windows XP Professional x64 - Download Microsoft Windows Server 2003 RTM/SP1 - Download Microsoft Windows Server 2003 x64 - View Microsoft Security Bulletin MS06-078 - View Microsoft Knowledge Base Article - 923689 - Visit Microsoft Corporation