Microsoft Update for Media Player

[Andr0m3da]

Microsoft has published -at
http://www.microsoft.com/technet/security/bulletin/MS02-032.asp- a security
bulletin, which also offers a critical patch for Windows Media Player 6.4,
7.1 and Windows Media Player for Windows XP.

This patch eliminates the security vulnerabilities in Windows Media Player
known to date and three new vulnerabilities, which are described below:

- Information disclosure vulnerability, which could allow an attacker to run
code on the affected system. Microsoft rates this vulnerability as "critical
severity".

- A vulnerability that could allow an attacker to physically access a
Windows 2000 machine, start a session on it and obtain the same right as the
operating system.

- A script execution vulnerability, which could allow an attacker to run any
code on the machine, due to a problem in the Windows Media Player playlist.

In this patch Microsoft also inserts a change in the configuration of the
file extensions related to Windows Media Player, and a new security feature
for users or organizations that want to take extra precautions.

The update can be downloaded from the following addresses, depending on the
version of Windows Media Player installed.

- Microsoft Windows Media Player 6.4:
http://download.microsoft.com/download/winmediaplayer/Update/320920/W98NT42K
Me/EN-US/wm320920_64.exe

- Microsoft Windows Media Player 7.1:
http://download.microsoft.com/download/winmediaplayer/Update/320920/W982KMe/
EN-US/wm320920_71.exe

- Microsoft Windows Media Player for Windows XP:
http://download.microsoft.com/download/winmediaplayer/Update/320920/WXP/EN-U
S/wm320920_8.exe