1. Skip to navigation
  2. Skip to content
  3. Skip to secondary-content

Where You Are

  1. Labs
  2. Security Threats
  3. Vulnerability Reports
  4. SA201006492

Microsoft MPEG Layer-3 Codecs Vulnerability

Report ID: SA201006492
Source: F-Secure
Date of Discovery: 10.08.2010
Criticality: Critical
Affects:
Windows XP
Windows Server 2003
Compromise From: From remote
Compromise Type: Remote code execution

Summary

A vulnerability in Microsoft M-PEG Layer-3 audio codecs could result in an execution of arbitrary code by a remote attacker.

Detailed Description

Microsoft has disclosed a vulnerability in M-PEG Layer-3 audio codecs that could lead to a remote attacker executing arbitrary code and taking control of an affected system. The vulnerability was caused by improper handling of maliciously crafted media files containing an M-PEG Layer-3 audio stream.

Solution

Original Reference

CVE Reference

CVE-2010-1882