Microsoft AVI File Exploit Lets Local Users Crash Windows Applications (Even Protected Programs such as Anti Viruses and Anti Rootkits)
Vulnerability Info:
Type: Crash / Exploit
Risk: High
Fix Available: No
Version(s): 2k SP4, 2k3 SP2, XP SP2, SP3 - Vista and 7 safe.
Description: an AVI file with manipulate data will crash the windows Programs, when a local user open a Directory form his/her Program to open the target file contain a manipulate AVI file, Target Program will crash and terminate.
Also when you click on selected file windows explorer will crash too.
Impact: A remote or local user could crash the target windows Programs like windows Explorer or even anti viruses and anti root kits.
Vendor Confirmed: Not yet
Exploit able: yes
We demonstrate some Video for Anti Viruses and Anti Rootkits here:
AVG_9.0
Avira Antivir
BitDefender_2009
Kaspersky_Inernet_Security_2010
Rootkit_Unhooker_LE_V3.8
You can download Vulnerability Video here
Watch this video
http://www.u0vd.org/avi.zip
Best Regards,
www.u0vd.org