Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large (1) width or (2) height values, aka the "PNG Processing Vulnerability."

The remote host is running Microsoft MSN Messenger.  There is a flaw in this version of MSN Messenger that would allow a remote attacker to potentially execute code on the target host.

The remote host is running Microsoft Media Player Version 9.  There is a flaw in this version of Media Player that would allow a remote attacker to potentially execute code on the target host.  Exploiting this flaw would require that the attacker be able to convince a local user to open an email or browse to a malicious URL.  

The remote host is running either Windows Media Player 9 or MSN Messenger.

There is a vulnerability in the remote version of this software that could allow an attacker to execute arbitrary code on the remote host.

To exploit this flaw, one attacker would need to set up a rogue PNG image and send it to a victim on the remote host.

ID	Name	Product	Family	Severity
2603	MSN Messenger < 6.2.0205 PNG File Remote Overflow (deprecated)	Nessus Network Monitor	Internet Messengers	high
2602	Microsoft Media Player Version 9 PNG Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	Generic	high
16328	MS05-009: Vulnerability in PNG Processing Could Allow Remote Code Execution (890261)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2004-1244

high

Tenable Plugins

high

high

high