Executive Summary

Informations
Name	MS01-056	First vendor Publication	N/A
Vendor	Microsoft	Last vendor Modification	N/A
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Windows Media Player .ASF Processor Contains Unchecked Buffer

OVAL Definitions

 

Definition Id: oval:org.mitre.oval:def:287
Oval ID:	oval:org.mitre.oval:def:287
Title:	Windows Media Player Buffer Overflow via ASF
Description:	Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format (ASF) file.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2001-0719	Version:	1
Platform(s):	Microsoft Windows XP	Product(s):	Windows Media Player for Windows XP
Definition Synopsis:
Windows Media Player for Windows XP is installed AND the version of msdxm.ocx is less than 6.4.9.1121 AND the version of dxmasf.dll is less than 6.4.9.1121 AND NOT Patch wm308567 Installed

CPE : Common Platform Enumeration

Type	Description	Count
Application	Microsoft Windows Media Player cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*	1

Open Source Vulnerability Database (OSVDB)

Id	Description
5558	Microsoft Windows Media Player Advanced Streaming Format Overflow A remote overflow exists in Microsoft Media Player. Media Player fails to handle an unusually long marker embedded in an .ASF file resulting in a buffer overflow. With a specially crafted request, an attacker can cause Media Player to crash or execute arbitrary code resulting in a loss of integrity or availability.