Microsoft Windows Media Player DoS Zero-Day

Recently a Windows Media Player zero-day was released. The exploit uses the ASX playlist as the attack vector.

eEye and others are researching the issue with the view that remote code execution is highly possible. This could turn ugly on social sites (like Myspace) if someone finds the memory "sweetspot", so keep an eye out on this one.

ASX radio station streaming is done all the time on Myspace.

http://research.eeye.com/html/alerts/zeroday/20061122.html