Oval Definition:oval:org.mitre.oval:def:11585
Revision Date:2010-09-27Version:44
Title:MPEG Layer-3 Audio Decoder Buffer Overflow Vulnerability
Description:Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via an MPEG Layer-3 audio stream in (1) a crafted media file or (2) crafted streaming content, aka "MPEG Layer-3 Audio Decoder Buffer Overflow Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-1882
Platform(s):Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s):
Definition Synopsis
  • OR
  • Microsoft Windows XP (x86) SP3 is installed
  • OR Microsoft Windows Server 2003 SP2 (x86) is installed
  • OR Microsoft Windows XP x64 Edition SP2 is installed
  • OR Microsoft Windows Server 2003 SP2 (x64) is installed
  • AND
  • the version of %SystemRoot%\system32\L3codecx.ax is less than 1.6.0.52
  • OR the version of %SystemRoot%\SysWOW64\L3codecx.ax is less than 1.6.0.52
  • OR the version of %SystemRoot%\SysWOW64\Wl3codecx.ax is less than 1.6.0.52
    • BACK