Executive Summary
| Summary | |
|---|---|
| Title | Vulnerability in Windows Media Player Could Allow Remote Code Execution (954154) |
| Informations | |||
|---|---|---|---|
| Name | MS08-054 | First vendor Publication | 2008-09-09 |
| Vendor | Microsoft | Last vendor Modification | 2008-09-15 |
| Severity (Vendor) | Critical | Revision | 2.0 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 9.3 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Revision Note: V2.0 (September 15, 2008): Added entry to the Frequently Asked Questions (FAQ) Related to This Security Update section to communicate the re-release of the Norwegian language update for Windows Media Player 11 on all supported 32-bit editions of Windows XP. Customers who require the Norwegian language update need to download and install the re-released update. Also removed an erroneous entry from the Non-Affected software table.Summary: This security update resolves a privately reported vulnerability in Windows Media Player that could allow remote code execution when a specially crafted audio file is streamed from a Windows Media server. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. |
Original Source
| Url : http://www.microsoft.com/technet/security/bulletin/MS08-054.mspx |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-94 | Failure to Control Generation of Code ('Code Injection') |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:5615 | |||
| Oval ID: | oval:org.mitre.oval:def:5615 | ||
| Title: | Windows Media Player Sampling Rate Vulnerability | ||
| Description: | Unspecified vulnerability in Microsoft Windows Media Player 11 allows remote attackers to execute arbitrary code via a crafted audio-only file that is streamed from a Server-Side Playlist (SSPL) on Windows Media Server, aka "Windows Media Player Sampling Rate Vulnerability." | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2008-2253 | Version: | 3 |
| Platform(s): | Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 | Product(s): | Microsoft Media Player |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2008-09-10 | Name : Windows Media Player 11 Remote Code Execution Vulnerability (954154) File : nvt/secpod_ms08-054_900045.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 47963 | Microsoft Windows Media Player Audio File Sampling Rate Remote Code Execution An unspecified remote code execution flaw exists in Windows. Windows Media Player fails to validate audio streams resulting in remote code execution. With a specially crafted audio stream, a context-dependent attacker can cause arbitrary code execution resulting in a loss of integrity. |
Information Assurance Vulnerability Management (IAVM)
| Date | Description |
|---|---|
| 2008-09-11 | IAVM : 2008-A-0064 - Microsoft Windows Media Player Remote Code Execution Vulnerability Severity : Category II - VMSKEY : V0017342 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Windows Media Player malicious playlist buffer overflow attempt RuleID : 14254 - Revision : 17 - Type : FILE-MULTIMEDIA |
| 2014-01-10 | Windows Media Player malicious playlist buffer overflow attempt RuleID : 14253 - Revision : 17 - Type : FILE-MULTIMEDIA |
| 2014-01-10 | Windows Media Player malicious playlist buffer overflow attempt RuleID : 14252 - Revision : 17 - Type : FILE-MULTIMEDIA |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2008-09-10 | Name : Arbitrary code can be executed on the remote host through the Media Player. File : smb_nt_ms08-054.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:46:03 |
|
| 2014-01-19 21:30:14 |
|
| 2013-11-11 12:41:09 |
|
| 2013-05-11 00:49:22 |
|
