Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability

To: <bugtraq@xxxxxxxxxxxxxxxxx>
Subject: Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability
From: "Michal Bucko (hackpl)" <sapheal@xxxxxxx>
Date: Mon, 14 May 2007 23:49:54 +0200
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Synopsis: Media Player Classic .MPA Div-By-Zero Denial of ServiceVulnerability

Vulnerable:  Media Player Classic 6.4.9.0

Author: Michal Bucko


Introduction

A multimedia player with a similar interface to Microsoft Windows MediaPlayer 6.4, but has many

more features specific for DivX playback.


Description

Media Player Classic fails to handle MPA-extension media files. When emptyfile provided Media Player

Classic fails to properly parse MPA file format.

00634DD1 |. 8B4C24 18 MOV ECX,DWORD PTR SS:[ESP+18]
00634DD5 |. 8B4424 14 MOV EAX,DWORD PTR SS:[ESP+14]
00634DD9 |. 33D2 XOR EDX,EDX
00634DDB |. F7F1 DIV ECX

ECX 00000000

Follow-Ups:
- Re: Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability
  - From: 3APA3A

Prev by Date: ImI image file inclusion in script upload
Next by Date: [USN-459-1] pptpd vulnerability
Previous by thread: ImI image file inclusion in script upload
Next by thread: Re: Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability
Index(es):
- Date
- Thread