certfr_avis - certa-2007-avi-539

CERTA-2007-AVI-539

Vulnerability from certfr_avis

Une vulnérabilité a été identifiée dans le traitement de certains fichiers média (ASF pour Advanced Streaming Format) par le module Windows Media Format Runtime. Cette vulnérabilité pourrait être exploitée par une personne malveillante par le biais d'un fichier spécialement construit, afin d'exécuter du code arbitraire sur le système.

Description

Une vulnérabilité a été identifiée dans le traitement de certains fichiers média (.ASF pour Advanced Streaming Format) par le module Windows Media Format Runtime. Ce format est utilisé pour le stockage et les échanges de données vidéo et audio. Cela implique en particulier les bibliothèques suivantes : wmasf.dll et wmsserver.dll, et concernene notamment les extensions de type .asf, .wmv et .wma.

Cette vulnérabilité pourrait être exploitée par une personne malveillante par le biais d'un fichier spécialement construit et inséré dans une page Web ou un courriel, afin d'exécuter du code arbitraire sur le système.

Solution

Se référer au bulletin de sécurité MS07-068 de Microsoft pour l'obtention des correctifs (cf. section Documentation).

Module d'exécution du format Windows Media 7.1 ;
Module d'exécution du format Windows Media 9 pour :
- Windows 2000 Service Pack 4 ;
- Windows XP Service Pack 2.
Module d'exécution du format Windows Media 9.5 pour :
- Windows XP Service Pack 2 ;
- Windows XP Professionnel Edition x64 ;
- Windows XP Professionnel Edition x64 Service Pack 2 ;
- Windows Server 2003 Service Pack 1 ;
- Windows Server 2003 Service Pack 2 ;
- Windows Server 2003 Edition x64 ;
- Windows Server 2003 Edition x64 Service Pack 2.
Module d'exécution du format Windows Media 9.5 Edition x64 pour :
- Windows XP Professionnel Edition x64 ;
- Windows XP Professionnel Edition x64 Service Pack 2 ;
- Windows Server 2003 Edition x64 ;
- Windows Server 2003 Edition x64 Service Pack 2.
Module d'exécution du format Windows Media 11 pour :
- Windows XP Service Pack 2 ;
- Windows XP Professionnel Edition x64 ;
- Windows XP Professionnel Edition x64 Service Pack 2 ;
- Windows Vista ;
- Windows Vista Edition x64.
Windows Media Services 9.1 pour :
- Windows Server 2003 Service Pack 1 et Service Pack 2 ;
- Windows Server 2003 Edition x64 y compris Service Pack 2 compris.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft MS07-068 du 11 décembre 2007	None	vendor-advisory
Avis de sécurité CERTA-2006-AVI-550 du 13 décembre 2006 :	-	other
La différence entre les fichiers ASF et WMV/WMA :	-	other
Microsoft Windows Media - Spécification ASF (Advanced Systems Format) :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cUL\u003e    \u003cLI\u003eModule d\u0027ex\u00e9cution du format Windows Media 7.1 ;\u003c/LI\u003e    \u003cLI\u003eModule d\u0027ex\u00e9cution du format Windows Media 9 pour :      \u003cUL\u003e        \u003cLI\u003eWindows 2000 Service Pack 4 ;\u003c/LI\u003e        \u003cLI\u003eWindows XP Service Pack 2.\u003c/LI\u003e      \u003c/UL\u003e    \u003c/LI\u003e    \u003cLI\u003eModule d\u0027ex\u00e9cution du format Windows Media 9.5 pour :      \u003cUL\u003e        \u003cLI\u003eWindows XP Service Pack 2 ;\u003c/LI\u003e        \u003cLI\u003eWindows XP Professionnel Edition x64 ;\u003c/LI\u003e        \u003cLI\u003eWindows XP Professionnel Edition x64 Service Pack 2        ;\u003c/LI\u003e        \u003cLI\u003eWindows Server 2003 Service Pack 1 ;\u003c/LI\u003e        \u003cLI\u003eWindows Server 2003 Service Pack 2 ;\u003c/LI\u003e        \u003cLI\u003eWindows Server 2003 Edition x64 ;\u003c/LI\u003e        \u003cLI\u003eWindows Server 2003 Edition x64 Service Pack 2.\u003c/LI\u003e      \u003c/UL\u003e    \u003c/LI\u003e    \u003cLI\u003eModule d\u0027ex\u00e9cution du format Windows Media 9.5 Edition x64    pour :      \u003cUL\u003e        \u003cLI\u003eWindows XP Professionnel Edition x64 ;\u003c/LI\u003e        \u003cLI\u003eWindows XP Professionnel Edition x64 Service Pack 2        ;\u003c/LI\u003e        \u003cLI\u003eWindows Server 2003 Edition x64 ;\u003c/LI\u003e        \u003cLI\u003eWindows Server 2003 Edition x64 Service Pack 2.\u003c/LI\u003e      \u003c/UL\u003e    \u003c/LI\u003e    \u003cLI\u003eModule d\u0027ex\u00e9cution du format Windows Media 11 pour :      \u003cUL\u003e        \u003cLI\u003eWindows XP Service Pack 2 ;\u003c/LI\u003e        \u003cLI\u003eWindows XP Professionnel Edition x64 ;\u003c/LI\u003e        \u003cLI\u003eWindows XP Professionnel Edition x64 Service Pack 2        ;\u003c/LI\u003e        \u003cLI\u003eWindows Vista ;\u003c/LI\u003e        \u003cLI\u003eWindows Vista Edition x64.\u003c/LI\u003e      \u003c/UL\u003e    \u003c/LI\u003e    \u003cLI\u003eWindows Media Services 9.1 pour :      \u003cUL\u003e        \u003cLI\u003eWindows Server 2003 Service Pack 1 et Service Pack 2        ;\u003c/LI\u003e        \u003cLI\u003eWindows Server 2003 Edition x64 y compris Service Pack        2 compris.\u003c/LI\u003e      \u003c/UL\u003e    \u003c/LI\u003e  \u003c/UL\u003e",
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e dans le traitement de certains\nfichiers m\u00e9dia (.ASF pour Advanced Streaming Format) par le module\nWindows Media Format Runtime. Ce format est utilis\u00e9 pour le stockage et\nles \u00e9changes de donn\u00e9es vid\u00e9o et audio. Cela implique en particulier les\nbiblioth\u00e8ques suivantes : wmasf.dll et wmsserver.dll, et concernene\nnotamment les extensions de type .asf, .wmv et .wma.\n\nCette vuln\u00e9rabilit\u00e9 pourrait \u00eatre exploit\u00e9e par une personne\nmalveillante par le biais d\u0027un fichier sp\u00e9cialement construit et ins\u00e9r\u00e9\ndans une page Web ou un courriel, afin d\u0027ex\u00e9cuter du code arbitraire sur\nle syst\u00e8me.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 MS07-068 de Microsoft pour\nl\u0027obtention des correctifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-0064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0064"
    }
  ],
  "initial_release_date": "2007-12-12T00:00:00",
  "last_revision_date": "2007-12-12T00:00:00",
  "links": [
    {
      "title": "Avis de s\u00e9curit\u00e9 CERTA-2006-AVI-550 du 13 d\u00e9cembre 2006 :",
      "url": "http://www.certa.ssi.gouv.fr/site/CERTA-2006-AVI-550/"
    },
    {
      "title": "La diff\u00e9rence entre les fichiers ASF et WMV/WMA :",
      "url": "http://support.microsoft.com/kb/284094/fr"
    },
    {
      "title": "Microsoft Windows Media - Sp\u00e9cification ASF (Advanced Systems Format) :",
      "url": "http://www.microsoft.com/windows/windowsmedia/fr/format/asfspec.aspx"
    }
  ],
  "reference": "CERTA-2007-AVI-539",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-12-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e dans le traitement de certains\nfichiers m\u00e9dia (ASF pour \u003cspan class=\"textit\"\u003eAdvanced Streaming\nFormat\u003c/span\u003e) par le module Windows Media Format Runtime. Cette\nvuln\u00e9rabilit\u00e9 pourrait \u00eatre exploit\u00e9e par une personne malveillante par\nle biais d\u0027un fichier sp\u00e9cialement construit, afin d\u0027ex\u00e9cuter du code\narbitraire sur le syst\u00e8me.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans le format de fichier Windows Media",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-068 du 11 d\u00e9cembre 2007",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS07-068.mspx"
    }
  ]
}

CVE-2007-0064 (GCVE-0-2007-0064)

Vulnerability from cvelistv5

Published

2007-12-12 00:00

Modified

2024-08-07 12:03

Severity ?

CWE

Summary

Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.

References

URL

Tags

	http://www.securitytracker.com/id?1019074	vdb-entry, x_refsource_SECTRACK
	http://www.kb.cert.org/vuls/id/319385	third-party-advisory, x_refsource_CERT-VN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3622	vdb-entry, signature, x_refsource_OVAL
	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-068	vendor-advisory, x_refsource_MS
	http://www.vupen.com/english/advisories/2007/4183	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/archive/1/485268/100/0/threaded	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/bid/26776	vdb-entry, x_refsource_BID
	http://www.securityfocus.com/archive/1/485268/100/0/threaded	vendor-advisory, x_refsource_HP
	http://www.us-cert.gov/cas/techalerts/TA07-345A.html	third-party-advisory, x_refsource_CERT
	http://secunia.com/advisories/28034	third-party-advisory, x_refsource_SECUNIA

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:03:37.104Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1019074",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019074"
          },
          {
            "name": "VU#319385",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/319385"
          },
          {
            "name": "oval:org.mitre.oval:def:3622",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3622"
          },
          {
            "name": "MS07-068",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-068"
          },
          {
            "name": "ADV-2007-4183",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4183"
          },
          {
            "name": "SSRT071506",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/485268/100/0/threaded"
          },
          {
            "name": "26776",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/26776"
          },
          {
            "name": "HPSBST02299",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/485268/100/0/threaded"
          },
          {
            "name": "TA07-345A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-345A.html"
          },
          {
            "name": "28034",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28034"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-12-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1019074",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019074"
        },
        {
          "name": "VU#319385",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/319385"
        },
        {
          "name": "oval:org.mitre.oval:def:3622",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3622"
        },
        {
          "name": "MS07-068",
          "tags": [
            "vendor-advisory",
            "x_refsource_MS"
          ],
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-068"
        },
        {
          "name": "ADV-2007-4183",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4183"
        },
        {
          "name": "SSRT071506",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://www.securityfocus.com/archive/1/485268/100/0/threaded"
        },
        {
          "name": "26776",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/26776"
        },
        {
          "name": "HPSBST02299",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://www.securityfocus.com/archive/1/485268/100/0/threaded"
        },
        {
          "name": "TA07-345A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-345A.html"
        },
        {
          "name": "28034",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28034"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0064",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1019074",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019074"
            },
            {
              "name": "VU#319385",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/319385"
            },
            {
              "name": "oval:org.mitre.oval:def:3622",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3622"
            },
            {
              "name": "MS07-068",
              "refsource": "MS",
              "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-068"
            },
            {
              "name": "ADV-2007-4183",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4183"
            },
            {
              "name": "SSRT071506",
              "refsource": "HP",
              "url": "http://www.securityfocus.com/archive/1/485268/100/0/threaded"
            },
            {
              "name": "26776",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/26776"
            },
            {
              "name": "HPSBST02299",
              "refsource": "HP",
              "url": "http://www.securityfocus.com/archive/1/485268/100/0/threaded"
            },
            {
              "name": "TA07-345A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA07-345A.html"
            },
            {
              "name": "28034",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28034"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0064",
    "datePublished": "2007-12-12T00:00:00",
    "dateReserved": "2007-01-04T00:00:00",
    "dateUpdated": "2024-08-07T12:03:37.104Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTA-2007-AVI-539

Vulnerability from certfr_avis

Description

Solution

CVE-2007-0064 (GCVE-0-2007-0064)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature