Vulnerabilities > CVE-2004-1623 - Denial Of Service vulnerability in Microsoft Windows XP WAV File Handler

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
microsoft
exploit available

Summary

The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service (infinite loop in Explorer) via a WAV file with an invalid file header whose fmt chunk length is set to 0xFFFFFFFF.

Vulnerable Configurations

Part Description Count
OS
Microsoft
7

Exploit-Db

descriptionMicrosoft Windows XP WAV File Handler Denial Of Service Vulnerability. CVE-2004-1623. Dos exploit for windows platform
idEDB-ID:24699
last seen2016-02-02
modified2004-10-22
published2004-10-22
reporterHexView
sourcehttps://www.exploit-db.com/download/24699/
titleMicrosoft Windows XP WAV File Handler Denial of Service Vulnerability