Cumulative Patch for Windows Media Player New

Microsoft has released an update for Windows Media Player that includes includes the functionality of all of the previously-released patches for Windows Media Player 6.4, 7.1, and Windows Media Player for Windows XP.

Issue

This is a cumulative patch that includes the functionality of all previously released patches for Windows Media Player 6.4, 7.1 and Windows Media Player for Windows XP. In addition, it eliminates the following three newly discovered vulnerabilities one of which is rated as critical severity, one of which is rated moderate severity, and the last of which is rated low severity:

• An information disclosure vulnerability that could provide the means to enable an attacker to run code on the user's system and is rated as critical severity.
• A privilege elevation vulnerability that could enable an attacker who can physically logon locally to a Windows 2000 machine and run a program to obtain the same rights as the operating system.
• A script execution vulnerability related that could run a script of an attacker's choice as if the user had chosen to run it after playing a specially formed media file and then viewing a specially constructed web page. This particular vulnerability has specific timing requirements that makes attempts to exploit vulnerability difficult and is rated as low severity.

It also introduces a configuration change relating to file extensions associated with Windows Media Player. Finally, it introduces a new, optional, security configuration feature for users or organizations that want to take extra precautions beyond applying IE patch MS02-023 and want to disable scripting functionality in the Windows Media Player for versions 7.x or higher.

Affected Products

• Microsoft Windows Media Player 6.4
• Microsoft Windows Media Player 7.1
• Microsoft Windows Media Player for Windows XP

Download

Software patches are available from the following locations:

• Microsoft Windows Media Player 6.4
• Microsoft Windows Media Player 7.1
• Microsoft Windows Media Player for Windows XP

Further Details

Source: Microsoft Corporation

Reference: Microsoft Corporation

Updated: June 26, 2002

>> Recommended Download - secure your PC from spyware, adware and malware now with Spyware Doctor <<