Microsoft Windows mmioRead () multimedia function integer overflow
Published:		15.03.2007
Source:		SECURITEAM
SecurityVulns ID:		7411
Type:		library
Level:		5/10
Description:		Integer overflow on negative parameter values.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server
		MICROSOFT : Windows Vista
CVE:		CVE-2007-1492 (winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service (infinite loop) via a large cch argument value to the mmioRead function, as demonstrated by a crafted WAV file.)

Original document

SECURITEAM, [NT] Windows Multimedia mmioRead DoS Vulnerability (15.03.2007)

Discuss:

Read or add your comments to this news (0 comments)