Windows Media Player security vulnerability found!

Question

Windows Media Player security vulnerability found!

Answer

This question was answered on November 23, 2001. Much of the information contained herein may have changed since posting.

One of the streaming media formats supported by Windows Media Player is Advanced Streaming Format (ASF). A security vulnerability has been discovered in Windows Media Player that allows malicious code to be embedded in an ASF file that could give user level access to a remote user.

The affected versions are:

Windows Media Player 6.4

Windows Media Player 7

Windows Media Player 7.1

Windows Media Player for Windows XP

A patch has been made available by Microsoft that fixes the vulnerablity.

Download locations for this patch for Windows Media Player 6.4, 7, or 7.1:

<a href="http://download.microsoft.com/download/winmediaplayer/Update/308567/WIN98MeXP/EN-US/wm308567.exe" target="_blank"><font color="#003399">>http://download.microsoft.com/download/winmediaplayer/Update/308567/WIN98MeXP/EN-US/wm308567.exe</b></font></a>

For Windows Media Player for Windows XP use <a href="http://windowsupdate.com" target="_blank"><font color="#003399">>http://windowsupdate.com </font></a>

Author

Posted by Ken of Data Doctors on November 23, 2001