bugtraq - DirectShow Arbitrary Memory Overwrite Vulnerability ms13-056

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <966B5774ECBD134698EE5E8CA17FD495241673@CERNXCHG32.cern.ch>
Date: Sun, 21 Jul 2013 21:02:07 +0000
From: Andres Gomez Ramirez <andres.gomez@...n.ch>
To: "bugtraq@...urityfocus.com" <bugtraq@...urityfocus.com>
Subject: DirectShow Arbitrary Memory Overwrite Vulnerability ms13-056

Introduction:

The Microsoft DirectShow application programming interface (API) is a media-streaming architecture for Microsoft Windows. Using DirectShow, your applications can perform high-quality video and audio playback or capture.  

Overview:

DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted GIF file, aka "DirectShow Arbitrary Memory Overwrite Vulnerability." 

References:

    * http://kuronosec.blogspot.de/2013/07/directshow-arbitrary-memory-overwrite.html
    * https://technet.microsoft.com/en-us/security/bulletin/ms13-056 
    * http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-3174

Fix:

http://technet.microsoft.com/en-us/security/bulletin/ms13-056