• info
• discussion
• exploit
• solution
• references

Microsoft Windows Media Components 'Service Principle Name' Remote Code Execution Vulnerability

Solution:
Microsoft has released a security bulletin and fixes to address this vulnerability.

NOTE: Microsoft has released new updates for Windows XP Embedded. Users of that operating system need to reinstall updates.


Microsoft Windows Media Services 9.0 Series

• Microsoft Security Update for Windows Server 2003 (KB952068)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=E71ABC2D-D60E -444A-9B7B-062C5805FE9E


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB952068)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=E0030155-1A9A -46CC-BBC8-6D0D1ED65C1F

Microsoft Windows Media Services 4.1

• Microsoft Security Update for Windows 2000 (KB952068)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=58B7D241-CEF6 -48FA-AA52-017695F71DB1

Microsoft Windows Media Format 9.0

• Microsoft Security Update for Windows 2000 (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=6A459497-0AB8 -41CB-87D0-B551631D8D8A


• Microsoft Security Update for Windows XP Service Pack 2 (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=504F816C-F554 -4B93-AC28-B085574D9BAC


• Microsoft Security Update for Windows XP Service Pack 3 (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=AD76FCF3-A2F9 -4E36-BD1B-C1536749173C

Microsoft Windows Media Format 11

• Microsoft Security Update for 32-bit Windows Media Runtime for Windows XP x64 Edition (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2DADC017-2BE5 -4240-AB8F-0291756DCA6B


• Microsoft Security Update for Windows Server 2008 (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=91EC4195-BC1C -444E-A7B0-EBDE46C088FA


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=8CAB6FE8-161D -4D8C-9772-EB3174A2C3C3


• Microsoft Security Update for Windows Vista (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=1FCDC8DD-26D9 -4D1A-8B3F-7B6A21A95999


• Microsoft Security Update for Windows Vista for x64-based Systems (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=8839F6CD-DFBF -448C-BF1E-1DA9BB5F3F25


• Microsoft Security Update for Windows XP Service Pack 2 (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=504F816C-F554 -4B93-AC28-B085574D9BAC


• Microsoft Security Update for Windows XP Service Pack 3 (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=AD76FCF3-A2F9 -4E36-BD1B-C1536749173C


• Microsoft Security Update for Windows XP x64 Edition (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=644EF023-EE40 -45B0-9C9D-C76D9FAB0005

Microsoft Windows Media Services 2008

• Microsoft Security Update for Windows Server 2008 (KB952068)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=FFB5D945-7F98 -4849-B020-ED4873FA42DF


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB952068)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=0204A366-5641 -4036-9CB0-A46D04AF9D72

Microsoft Windows Media Player 6.4

• Microsoft Security Update for Windows 2000 (KB954600)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=C33D558E-45F9 -4E85-B48C-03BD0E8CB4BC


• Microsoft Security Update for Windows Server 2003 (KB954600)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2315CE20-2F46 -42C2-BB40-045F003409D7


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB954600)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=4C29BED9-1B88 -4D2F-80A5-305C2BEDD89F


• Microsoft Security Update for Windows XP (KB954600)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=99241309-E644 -4088-A8F3-38837FAB4037


• Microsoft Security Update for Windows XP x64 Edition (KB954600)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=946D47C9-B208 -4FAB-8EF6-774413D61BC8

Microsoft Windows Media Format 9.5 x64

• Microsoft Security Update for Windows XP and Windows Server 2003 x64 Edition (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=AE9E8B07-5354 -42F3-A226-BA2193244524

Microsoft Windows Media Format 7.1

• Microsoft Security Update for Windows 2000 (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=6A459497-0AB8 -41CB-87D0-B551631D8D8A

Microsoft Windows Media Format 9.5

• Microsoft Security Update for Windows Server 2003 (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=D8958248-C889 -499E-A6A9-3B394CDB27EA


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2278022E-A716 -46C0-BEDF-D626933BD815


• Microsoft Security Update for Windows XP Service Pack 2 (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=504F816C-F554 -4B93-AC28-B085574D9BAC


• Microsoft Security Update for Windows XP Service Pack 3 (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=AD76FCF3-A2F9 -4E36-BD1B-C1536749173C


• Microsoft Security Update for Windows XP x64 Edition (KB952069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=644EF023-EE40 -45B0-9C9D-C76D9FAB0005