• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft Windows Media Player Malformed PNG Remote Code Execution Vulnerability

Solution:
Microsoft has released a security bulletin and fixes to address this issue.


Microsoft Windows Media Player 7.1

• Microsoft Security Update for Windows Media Player 7.1 for Windows 2000 (KB917734)
  Media Player 7.1 when installed on Windows 2000 Service Pack 4
  http://www.microsoft.com/downloads/details.aspx?familyid=5abb6258-9468 -4188-a178-aa46f100ab61&displaylang=en

Microsoft Windows Media Player 9.0

• Microsoft Security Update for Windows Media Player 9 (KB917734)
  For Microsoft Windows XP Service Pack 2 and Microsoft Windows Server 2003
  http://www.microsoft.com/downloads/details.aspx?familyid=c00be4c3-34ba -4858-90d7-520b7d240e33&displaylang=en


• Microsoft Security Update for Windows Media Player 9 (KB917734)
  Media Player 9 when installed on Windows 2000 Service Pack 4 or Windows XP Service Pack 1
  http://www.microsoft.com/downloads/details.aspx?familyid=c00be4c3-34ba -4858-90d7-520b7d240e33&displaylang=en

Microsoft Windows Media Player XP

• Microsoft Security Update for Windows Media Player 8 for Windows XP (KB917734)
  For XP on Microsoft Windows XP Service Pack 1
  http://www.microsoft.com/downloads/details.aspx?familyid=11372cc0-3da9 -49ad-bb08-1493ce3cd0bd&displaylang=en

Microsoft Windows Media Player 10.0

• Microsoft Security Update for Windows Media Player 10 for Windows XP (KB917734)
  Media Player 10 when installed on Windows XP Service Pack 1 or Windows XP Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?familyid=0f641572-74fd -4281-953f-6f2f12e001e0&displaylang=en


• Microsoft Security Update for Windows Server 2003 (KB917734)
  Microsoft Windows Server 2003 Service Pack 1
  http://www.microsoft.com/downloads/details.aspx?familyid=4f933b0c-7d2d -4049-92da-bbbe97371594&displaylang=en


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB917734)
  Microsoft Windows Server 2003 x64 Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=facc7dfe-9b3b -48dd-a068-5bb9c6b60f87&displaylang=en


• Microsoft Security Update for Windows XP x64 Edition (KB917734)
  Microsoft Windows XP Professional x64 Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=f59065ec-0279 -48ec-ab27-8abca715ac01&displaylang=en