Media Encoder Denial of Service
Reported May 30 by Microsoft

VERSIONS EFFECTED
Microsoft Windows Media Encoder 4.0
  • Microsoft Windows Media Encoder 4.1
  • DESCRIPTION

    According to Microsoft"s bulletin, "If a request with a particular malformation were sent to an affected encoder, it could cause it to fail, thereby denying formatted content to the Windows Media Server. This vulnerability would primarily affect streaming media providers that supply real-time broadcasts of streaming media – it would not prevent a Windows Media Server from distributing already-encoded data."

    VENDOR RESPONSE

    Microsoft had released a patch, however the patch was removed for unknown reasons. See Q264133 for more details.

    CREDITS
    Discovered and reported by Microsoft