• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft Windows Media Player Remote Skin Decompression Code Execution Vulnerability

Solution:
Microsoft has released an advisory along with fixes to address this issue. Please see the references for more information.


Microsoft Windows Media Player 11

• Microsoft Security Update for Windows Media Player 11 for Windows XP (KB936782)
  Windows XP Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?FamilyId=a690d042-1137 -4aaf-bd0e-565ea04d1f2b


• Microsoft Security Update for Windows Media Player 11 for Windows XP x64 Edition (KB936782)
  Windows Server 2003 Service Pack 2 x64 Edition; Windows XP Professional x64 Edition
  http://www.microsoft.com/downloads/details.aspx?FamilyId=bdc89f34-c1ff -46ab-b52d-c02d51c5c373


• Microsoft Security Update for Windows Vista (KB936782)
  Windows Vista
  http://www.microsoft.com/downloads/details.aspx?FamilyId=80e5167c-4f75 -4ce3-8b15-2f50958deec8


• Microsoft Security Update for Windows Vista for x64-based Systems (KB936782)
  Windows Vista Business 64-bit edition; Windows Vista Enterprise 64-bit edition; Windows Vista Home Basic 64-bit edition; Windows Vista Home Premium 64-bit edition; Windows Vista Ultimate 64-bit edition
  http://www.microsoft.com/downloads/details.aspx?FamilyId=bf30b714-d6e7 -47ea-b79e-84c18370a661

Microsoft Windows Media Player 10.0

• Microsoft Security Update for Windows Media Player 10 for Windows XP (KB936782)
  Windows XP SP2
  http://www.microsoft.com/downloads/details.aspx?FamilyId=48f5a9d3-b859 -4cb6-a68e-abde76a14782


• Microsoft Security Update for Windows Server 2003 (KB936782)
  Windows Server 2003 Service Pack 1; Windows Server 2003 Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?FamilyId=8d9f1fdf-6d4c -44d4-9b5f-bdbe8ac28d7f


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB936782)
  indows Server 2003 Service Pack 2 x64 Edition; Windows Server 2003, Datacenter x64 Edition; Windows Server 2003, Enterprise x64 Edition; Windows Server 2003, Standard x64 Edition
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2c04c7f2-728e -43bd-8574-26e411fcd129


• Microsoft Security Update for Windows XP x64 Edition (KB936782)
  Windows Server 2003 Service Pack 2 x64 Edition; Windows XP Professional x64 Edition
  http://www.microsoft.com/downloads/details.aspx?FamilyId=949580be-cbb3 -4271-8ca0-0ead7f2d8801

Microsoft Windows Media Player 9.0

• Microsoft Security Update for Windows Media Player 9 (KB936782)
  Windows 2000 SP4 or Windows XP SP2
  http://www.microsoft.com/downloads/details.aspx?FamilyId=bd4a6474-5fde -415e-840e-7d973cb71c95

Microsoft Windows Media Player 7.1

• Microsoft Security Update for Windows Media Player 7.1 for Windows 2000 (KB936782)
  Windows 2000 SP4
  http://www.microsoft.com/downloads/details.aspx?FamilyId=9f46b1fc-ee7b -437f-9492-67d003711021