CVE

Id
26392  
CVE No.
CVE-2007-3035  
Status
Candidate  
Description
Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that is not properly handled during decompression, aka "Windows Media Player Code Execution Vulnerability Decompressing Skins."  
Phase
Assigned (20070605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
267348 26392 CVE-2007-3035 BUGTRAQ:20070814 ZDI-07-047: Microsoft Windows Media Player Malformed Skin Header Code Execution Vulnerability  View
267349 26392 CVE-2007-3035 URL:http://www.securityfocus.com/archive/1/archive/1/476548/100/0/threaded  View
267350 26392 CVE-2007-3035 MS:MS07-047  View
267351 26392 CVE-2007-3035 URL:http://www.microsoft.com/technet/security/bulletin/ms07-047.mspx  View
267352 26392 CVE-2007-3035 MISC:http://www.zerodayinitiative.com/advisories/ZDI-07-047.html  View
267353 26392 CVE-2007-3035 CERT:TA07-226A  View
267354 26392 CVE-2007-3035 URL:http://www.us-cert.gov/cas/techalerts/TA07-226A.html  View
267355 26392 CVE-2007-3035 BID:25305  View
267356 26392 CVE-2007-3035 URL:http://www.securityfocus.com/bid/25305  View
267357 26392 CVE-2007-3035 VUPEN:ADV-2007-2871  View
267358 26392 CVE-2007-3035 URL:http://www.vupen.com/english/advisories/2007/2871  View
267359 26392 CVE-2007-3035 OVAL:oval:org.mitre.oval:def:1352  View
267360 26392 CVE-2007-3035 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1352  View
267361 26392 CVE-2007-3035 SECTRACK:1018565  View
267362 26392 CVE-2007-3035 URL:http://securitytracker.com/id?1018565  View
267363 26392 CVE-2007-3035 SECUNIA:26433  View
267364 26392 CVE-2007-3035 URL:http://secunia.com/advisories/26433  View
267365 26392 CVE-2007-3035 XF:win-mediaplayer-skin-header-code-execution(35895)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51944 JVNDB-2007-000607 Microsoft Windows Media Player のスキンファイルのヘッダ処理におけるヒープオーバーフローの脆弱性 Microsoft Windows Media Player には、スキンファイル (WMZ ファイルや WMD ファイル) のヘッダ情報の処理に不備が存在するために、ヒープオーバーフローが発生する脆弱性が存在します。 CVE-2007-3037 26392 7.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000607.html  View