MS.Windows.Intel.Indeo.Codec.Parsing.Stack.Overflow

Description

This indicates an attack attempt against a stack overflow vulnerability in
Microsoft Intel Indeo codec.
The vulnerability is caused by an error when the vulnerable library handles
a malicious file. It allows a remote attacker to execute arbitrary code via sending a crafted web page embedding a video file.

Affected Products

Microsoft Windows 2000 SP4
Microsoft Windows XP SP3
Microsoft Windows 2003 SP2

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Refer to the vendor's web site for suggested solution:
http://www.microsoft.com/technet/security/advisory/954157.mspx

References