Update Protection against Microsoft Windows Media Format ASF Parsing Code Execution Vulnerability (MS07-068)
| Check Point Reference: | CPAI-2007-142 | |
| Date Published: | ||
| Severity: | ||
| Source: | Microsoft Security Bulletin MS07-068 | |
| Industry Reference(s): | CVE-2007-0064 | |
| Protection Provided by: |
VPN-1
|
|
| Who is Vulnerable? Microsoft Windows Media Format Runtime 7.1 Microsoft Windows Media Format Runtime 9 Microsoft Windows Media Format Runtime 9.5 Microsoft Windows Media Format Runtime 11 Microsoft Windows Media Format Runtime x64 Edition 9.5 Microsoft Windows Media Services 9.1 Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 | ||
| Vulnerability Description Multiple buffer overflow vulnerabilities have been reported in Microsoft Windows Media Format Runtime. The Microsoft Windows Media Format Runtime provides information and tools for applications that use Windows Media content. The core component of Windows Media Format is the Advanced Systems Format (ASF). ASF is a file format that stores audio and video information and is specially designed to run over networks like the Internet. A remote attacker can exploit this vulnerability via a specially crafted ASF file. Successful exploitation of the vulnerability allows execution of arbitrary code on a vulnerable system. |
||
|
Update/Patch Available Apply patches: Microsoft Security Bulletin MS07-068 |
|
|
Vulnerability Details The vulnerability is due to boundary errors in the Microsoft Windows Media Format Runtime that fails to properly process malformed ASF files. A remote attacker could trigger this flaw via a specially crafted ASF file. Successful exploitation allows execution of arbitrary code once a malformed ASF file is being loaded on a vulnerable system. |
Protection Overview
By enabling this protection, SmartDefense will detect and block multiple vulnerabilities in the ASF file format.
In order for the protection to be activated, update your VPN-1/InterSpect product to the latest SmartDefense update. For information on how to update SmartDefense, go to SBP-2006-05, Protection tab and select the version of your choice.
To configure the defense, select your product from the list below and follow the related protection steps.
Additional Information
The update released on December 30, 2007 includes the following protections:
Microsoft DirectX SAMI Files Parsing Vulnerability (MS07-064) CPAI-2007-141
Microsoft Windows Media Format ASF Parsing Vulnerability (MS07-068) CPAI-2007-142
Recent Malware Threats (30-Dec-07) (CPAI-2007-143)