Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability

["Michal Bucko (hackpl)" <sapheal () hack pl>]

Synopsis:     Media Player Classic .MPA Div-By-Zero Denial of Service 
Vulnerability
Vulnerable:  Media Player Classic 6.4.9.0

Author: Michal Bucko


Introduction

A multimedia player with a similar interface to Microsoft Windows Media 
Player 6.4, but has many
more features specific for DivX playback.


Description

Media Player Classic fails to handle MPA-extension media files. When empty 
file provided Media Player
Classic fails to properly parse MPA file format.

00634DD1 |. 8B4C24 18 MOV ECX,DWORD PTR SS:[ESP+18]
00634DD5 |. 8B4424 14 MOV EAX,DWORD PTR SS:[ESP+14]
00634DD9 |. 33D2 XOR EDX,EDX
00634DDB |. F7F1 DIV ECX

ECX 00000000