Vulnerability CVE-2007-0064

Vulnerability Name:

CVE-2007-0064 (CCN-33225)

Assigned:

2007-12-11

Published:

2007-12-11

Updated:

2018-10-30

Summary:

Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Access Complexity (AC): Authentication (Au):
Impact Metrics:	Confidentiality (C): Integrity (I): Availibility (A):

9.3 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Access Complexity (AC): Athentication (Au):
Impact Metrics:	Confidentiality (C): Integrity (I): Availibility (A):

Vulnerability Type:

CWE-119

Vulnerability Consequences:

Gain Access

References:

Vulnerable Configuration:

Configuration 1:

cpe:/o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*

AND

cpe:/a:microsoft:windows_media_format_runtime:7.1:*:*:*:*:*:*:*

Configuration 2:

cpe:/o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*

AND

cpe:/a:microsoft:windows_media_format_runtime:9:*:*:*:*:*:*:*

Configuration 3:

cpe:/o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows_xp:*:*:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*

AND

cpe:/a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*

Configuration 4:

cpe:/o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows_xp:*:*:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*

AND

cpe:/a:microsoft:windows_media_format_runtime:9.5:*:x64:*:*:*:*:*

Configuration 5:

cpe:/o:microsoft:windows_vista:*:*:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows_vista:-:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_xp:*:*:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*

AND

cpe:/a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*

Configuration 6:

cpe:/o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*

AND

cpe:/a:microsoft:windows_media_services:9.1:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:microsoft:windows_media_format_runtime:9.5:*:x64:*:*:*:*:*

OR cpe:/a:microsoft:windows_media_format_runtime:7.1:*:*:*:*:*:*:*

OR cpe:/a:microsoft:windows_media_format_runtime:9:*:*:*:*:*:*:*

OR cpe:/a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*

OR cpe:/a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*

OR cpe:/a:microsoft:windows_media_services:9.1:*:*:*:*:*:*:*

AND

cpe:/o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*

OR cpe:/o:microsoft:windows:2003_server:*:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows:xp:sp2:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_vista:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows:server_2003:sp2:*:*:*:*:*:*

OR cpe:/o:microsoft:windows:server_2003:sp2:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows_vista:*:*:*:*:*:*:x64:*

OR cpe:/o:microsoft:windows_xp::sp2:x64:*:professional:*:*:*

Denotes that component is vulnerable

Vulnerability Name:

CVE-2007-0064 (CCN-38827)

Assigned:

2007-12-11

Published:

2007-12-11

Updated:

2018-10-30

Summary:

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Access Complexity (AC): Authentication (Au):
Impact Metrics:	Confidentiality (C): Integrity (I): Availibility (A):

9.3 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Access Complexity (AC): Athentication (Au):
Impact Metrics:	Confidentiality (C): Integrity (I): Availibility (A):

Vulnerability Type:

CWE-119

Vulnerability Consequences:

Gain Access

References:

Vulnerability Name:

CVE-2007-0064 (CCN-38828)

Assigned:

2007-12-11

Published:

2007-12-11

Updated:

2007-12-11

Summary:

Microsoft Windows Media File Format is vulnerable to a heap-based buffer overflow, caused by improper bounds checking of the corresponding length entry of the audio_conceal_none property of an ASF stream. By persuading a victim to open a specially-crafted ASF file, a remote attacker could overflow a buffer and execute arbitrary code on the victim's system. An attacker could exploit this vulnerability by sending the malicious file as an email attachment or hosting it on a Web site.

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Access Complexity (AC): Authentication (Au):
Impact Metrics:	Confidentiality (C): Integrity (I): Availibility (A):

9.3 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Access Complexity (AC): Athentication (Au):
Impact Metrics:	Confidentiality (C): Integrity (I): Availibility (A):

Vulnerability Consequences:

Gain Access

References:

Vulnerable Configuration:

Configuration CCN 1:

cpe:/a:microsoft:windows_media_format_runtime:9.5:*:x64:*:*:*:*:*

OR cpe:/a:microsoft:windows_media_format_runtime:7.1:*:*:*:*:*:*:*

OR cpe:/a:microsoft:windows_media_format_runtime:9:*:*:*:*:*:*:*

OR cpe:/a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*

OR cpe:/a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*

OR cpe:/a:microsoft:windows_media_services:9.1:*:*:*:*:*:*:*

AND

cpe:/o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*

OR cpe:/o:microsoft:windows:2003_server:*:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows:xp:sp2:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_vista:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows:server_2003:sp2:*:*:*:*:*:*

OR cpe:/o:microsoft:windows:server_2003:sp2:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows_vista:*:*:*:*:*:*:x64:*

OR cpe:/o:microsoft:windows_xp::sp2:x64:*:professional:*:*:*

Denotes that component is vulnerable

Vulnerability Name:

CVE-2007-0064 (CCN-38829)

Assigned:

2007-12-11

Published:

2007-12-11

Updated:

2007-12-11

Summary:

Microsoft Windows Media File Format is vulnerable to a heap-based buffer overflow, caused by improper bounds checking of the error correction and type-specific data lengths of a Stream Property entry in an ASF stream. By persuading a victim to open a specially-crafted ASF file, a remote attacker could overflow a buffer and execute arbitrary code on the victim's system. An attacker could exploit this vulnerability by sending the malicious file as an email attachment or hosting it on a Web site.

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Access Complexity (AC): Authentication (Au):
Impact Metrics:	Confidentiality (C): Integrity (I): Availibility (A):

9.3 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Access Complexity (AC): Athentication (Au):
Impact Metrics:	Confidentiality (C): Integrity (I): Availibility (A):

Vulnerability Consequences:

Gain Access

References:

Vulnerable Configuration:

Configuration CCN 1:

cpe:/a:microsoft:windows_media_format_runtime:9.5:*:x64:*:*:*:*:*

OR cpe:/a:microsoft:windows_media_format_runtime:7.1:*:*:*:*:*:*:*

OR cpe:/a:microsoft:windows_media_format_runtime:9:*:*:*:*:*:*:*

OR cpe:/a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*

OR cpe:/a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*

OR cpe:/a:microsoft:windows_media_services:9.1:*:*:*:*:*:*:*

AND

cpe:/o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*

OR cpe:/o:microsoft:windows:2003_server:*:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows:xp:sp2:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_vista:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows:server_2003:sp2:*:*:*:*:*:*

OR cpe:/o:microsoft:windows:server_2003:sp2:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows_vista:*:*:*:*:*:*:x64:*

OR cpe:/o:microsoft:windows_xp::sp2:x64:*:professional:*:*:*

Denotes that component is vulnerable

Vulnerability Name:

CVE-2007-0064 (CCN-38830)

Assigned:

2007-12-11

Published:

2007-12-11

Updated:

2007-12-11

Summary:

Microsoft Windows Media File Format is vulnerable to a heap-based buffer overflow, caused by improper bounds checking of the error correction data length of a Stream Property entry in an ASF stream. By persuading a victim to open a specially-crafted ASF file, a remote attacker could overflow a buffer and execute arbitrary code on the victim's system. An attacker could exploit this vulnerability by sending the malicious file as an email attachment or hosting it on a Web site.

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Access Complexity (AC): Authentication (Au):
Impact Metrics:	Confidentiality (C): Integrity (I): Availibility (A):

9.3 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Access Complexity (AC): Athentication (Au):
Impact Metrics:	Confidentiality (C): Integrity (I): Availibility (A):