Tags: Laurent Gaffie, Microsoft, MIDI, Security, snd, WAV, Windows Media Player, Windows Vista, Windows XP

Microsoft denies a major bug in Windows Media Player

It’s happening all over again. Windows Media Player is said to contain a major bug which can result in remote code execution.

Microsoft has denied the criticality of this bug. The software giant said that the problem is much smaller and poses no major risk to the user of the application.

Security researcher Laurent Gaffie had claimed in a report that a vulnerability existed in Windows Media Player 9, 10, and 11.

He stated that the bug would allow a hacker to create a malformed WAV, SND, or MIDI file to compromise a PC running Windows Vista or Windows XP.

He also showcased a proof-of-concept code for the same.

Microsoft stated in a blog post: “We’ve found no possibility for code execution in this issue. Yes, the proof of concept code does trigger a crash of Windows Media player, but the application can be restarted right away and doesn’t affect the rest of the system.”