eEye Security Advisory – eEye Digital Security has discovered a vulnerability in the Windows Media Player 9 AVI movie DirectX component that allows memory at an arbitrary address to be modified when a specially crafted AVI file is played. Exploitation of this vulnerability can allow the execution of attacker-supplied code on a victim’s system with the privileges of the user who attempted to open the movie file. This vulnerability has been identified in a component of DirectX.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40633/EEYEB-20050510.txt
Source: https://packetstormsecurity.com/files/40633/EEYEB-20050510.txt.html