Heap-based Buffer Overflow in Windows Media Format Runtime by Microsoft

CVE-2007-0064

Summary

The vulnerability arises from a heap-based buffer overflow in the Windows Media Format Runtime, specifically affecting versions 7.1, 9, 9.5, 9.5 x64 Edition, and 11, along with Windows Media Services 9.1. When a user opens a specially crafted Advanced Systems Format (ASF) file, it can lead to arbitrary code execution by remote attackers. This poses significant security risks, especially in environments where media files are frequently accessed. Mitigation requires timely updates and adherence to security best practices.

References