Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX file, or (2) a long banner tag, a variant of the ".ASX Buffer Overrun" vulnerability as discussed in MS:MS00-090.
| Software | From | Fixed in |
|---|---|---|
| microsoft / windows_media_player | 6.3 | 6.3.x |
| microsoft / windows_media_player | 6.4 | 6.4.x |
| microsoft / windows_media_player | 7 | 7.x |