OVAL Repository - View Definition: oval:org.mitre.oval:def:2207

Open Vulnerability and Assessment Language (OVAL)

News — July 2, 2009

OVAL Repository > View Definition

View Definition

NEW SEARCH : BACK

Definition Id: oval:org.mitre.oval:def:2207		Date: 2007-08-23
Title:	Windows Media Player Code Execution Vulnerability Parsing Skins
Description:	Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player Code Execution Vulnerability Parsing Skins."
Version:	1	Class:	vulnerability
Status:	ACCEPTED	Reference(s):	CVE-2007-3037
Family:	windows
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Windows Media Player
Definition Synopsis:
Media Playa v7.10 Windows Media Player v7.1 is installed AND the version of Wmpui.dll is less than 7.10.0.3080 OR Media Playa v9 Windows Media Player v9 is installed AND the version of Wmp.dll is less than 9.0.0.3354 OR Media Playa v10 on XP Windows XP, SP2 is installed AND Windows Media Player v10 is installed AND the version of Wmp.dll is less than 10.0.0.4058 OR Media Playa v11 on XP Windows XP, SP2 is installed AND Windows Media Player v11 is installed AND the version of Wmp.dll is less than 11.0.5721.5230 OR Media Playa v10 on S03,SP1 Microsoft Windows Server 2003 (x86) SP1 is installed OR Microsoft Windows Server 2003 (x64) SP1 is installed OR Microsoft Windows Server 2003 (ia64) SP1 is installed AND Windows Media Player v10 is installed AND the version of Wmp.dll is less than 10.0.0.3709 OR Media Playa v10 on S03,SP2 Microsoft Windows Server 2003 (x86) SP2 is installed OR Microsoft Windows Server 2003 (x64) SP2 is installed OR Microsoft Windows Server 2003 (ia64) SP2 is installed AND Windows Media Player v10 is installed AND the version of Wmp.dll is less than 10.0.0.3998 OR Media Playa v11 on Vista Microsoft Windows Vista is installed AND Windows Media Player v11 is installed AND the version of Wmp.dll is less than 11.0.6000.6336

NEW SEARCH : BACK

Section Contents
About the Repository
Authoring Style Guide
Submission Guidelines
OVAL Definition Lifecycle
Statement of CVE Compatibility
Top Contributor Awards
Other Repositories
Join Repository Forum
Forum Archives
Terms of Use


	OVAL is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security. The OVAL Web site is hosted by The MITRE Corporation. Copyright 2002-2009, The MITRE Corporation. All rights reserved. OVAL and the OVAL logo are registered trademarks of The MITRE Corporation. Contact oval@mitre.org for more information.	Privacy policy Terms of use