• info
• discussion
• exploit
• solution
• references

Microsoft Active Template Library 'IPersistStreamInit' Remote Code Execution Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for details.


Microsoft Windows Vista Home Premium SP2

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows ATL Component 0

• Microsoft Security Update for Windows 2000 (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=c773149a-f4fc -486a-b718-6b8ff7a36ae2


• Microsoft Security Update for Windows Server 2003 (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=7d9369b5-0c54 -4c17-bc62-fba0a7b4728c


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=ad1791b3-8553 -4433-a9f7-8b4f857665be


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=90e0e014-ed7e -498a-9f61-18bb09a384b3


• Microsoft Security Update for Windows Server 2008 (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=ba423491-6c29 -49f2-811b-ac3f9bbc58fc


• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=e5612bb4-5f37 -4b38-bd2e-f198c413371c


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=b9311953-889a -415f-a396-250a005e95cd


• Microsoft Security Update for Windows Vista (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=80de158d-157e -4c21-9154-c1dbd6e57cb3


• Microsoft Security Update for Windows Vista for x64-based Systems (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=82940d30-6a30 -47ca-b184-2ac96e35c294


• Microsoft Security Update for Windows XP (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b4c6fc5-e8e6 -4d89-a181-e231240468f9


• Microsoft Security Update for Windows XP x64 Edition (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=2f2b93fc-f977 -4f23-af90-c27f744fad0a

Microsoft Windows Vista Home Basic SP1

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows XP Media Center Edition SP3

• Microsoft Security Update for Windows XP (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=46aa443c-4e7b -4bd5-8b4e-0068c3dc0e79&displaylang=en

Microsoft Windows Vista Enterprise

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows Media Player 9.0

• Microsoft Security Update for Windows Media Player 9 for Windows 2000 (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=bd7c9fc4-61cb -4c23-9961-6d63f234731c


• Microsoft Security Update for Windows XP Service Pack 2 (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=34b2b14d-5811 -4635-ba83-f837dcb03d04


• Microsoft Security Update for Windows XP Service Pack 3 (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=ec84c98b-6bc7 -442f-9280-d6e204280b2f

Microsoft Windows Vista Ultimate SP2

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows Vista Home Basic SP2

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Microsoft MSWebDVD ActiveX Control 0

• Microsoft Security Update for Windows Server 2003 (KB973815)
  http://www.microsoft.com/downloads/details.aspx?familyid=301ad191-8d3f -41d3-b41c-e2e863893f73


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB973815)
  http://www.microsoft.com/downloads/details.aspx?familyid=5b8a8958-c3cd -4b24-85a2-1baacf92d218


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB973815)
  http://www.microsoft.com/downloads/details.aspx?familyid=2ae71a65-5eee -4dd2-bc79-b7c5a73022bc


• Microsoft Security Update for Windows XP (KB973815)
  http://www.microsoft.com/downloads/details.aspx?familyid=8b71bcc9-5146 -4afc-8847-0af21d7fad36


• Microsoft Security Update for Windows XP x64 Edition (KB973815)
  http://www.microsoft.com/downloads/details.aspx?familyid=85b2dcdb-cea9 -4c4a-8ebd-50264e781ade

Microsoft Windows Vista Home Basic

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows Vista Ultimate

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows Vista Home Premium SP1

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows Media Player 10.0

• Microsoft Security Update for Windows Server 2003 (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=ab054890-983b -4414-ad0a-da1b2d2a4895


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=5890233a-d8f7 -490c-8bf5-3ed4bd1c6991


• Microsoft Security Update for Windows XP x64 Edition (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=bb98187a-8db9 -47e4-88ac-15544c5268f6

Microsoft Windows Media Player 11

• Microsoft Security Update for Windows Media Player 11 for Windows XP X64 Edition (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=9e8b9027-4407 -4c31-a2ba-9e094557d467


• Microsoft Security Update for Windows Server 2008 (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=85d9e69f-99a2 -467f-bf37-4b47466a12d4


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=9501c8c2-a526 -4661-8cba-7847bace1aa0


• Microsoft Security Update for Windows Vista (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=3766aed9-93f5 -478e-a5bf-b7ee0b577088


• Microsoft Security Update for Windows Vista for x64-based Systems (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=64edbd64-9faa -4f54-b0d5-836c683ca7cd


• Microsoft Security Update for Windows XP Service Pack 2 (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=34b2b14d-5811 -4635-ba83-f837dcb03d04


• Microsoft Security Update for Windows XP Service Pack 3 (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=ec84c98b-6bc7 -442f-9280-d6e204280b2f