Microsoft has made defense in depth changes to Microsoft Windows Media Player to help with security in social networking sites. These changes are introduced after you install security update 936782 (security bulletin MS07-047).
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 (http://support.microsoft.com/kb/322756/) How to back up and restore the registry in Windows
You install the security update that is described in the following Knowledge Base article:
936782 (http://support.microsoft.com/kb/936782/) MS07-047: Vulnerability in Windows Media Player could allow remote code execution
After you install the security update, you notice that you must have Adobe Flash 9 installed to play Flash content through Windows Media Player. If Flash 9 is not installed, a dialog box that contains the following text prompts you to install Flash 9:
To play the selected item, you must install a later version of the Macromedia Flash Player. To download the Macromedia Flash Player, go to the Macromedia Web site.
Additionally, after you install the security update, you can pass the following parameters to Flash to make Flash more secure:
| 1. | <param name="allowScriptAccess" value="never"> |
| 2. | <param name="allowNetworking" value="internal"> |
Note By default, this new behavior is enabled. To disable this new behavior, follow these steps:
| 1. | Click Start, click Run, type regedit, and then click OK.
|
| 2. | Locate and then click the following registry subkey:
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences |
| 3. | On the Edit menu, point to New, and then click DWORD Value.
|
| 4. | Type RestrictFlash, and then press ENTER.
|
| 5. | Double-click RestrictFlash.
|
| 6. | Type 0 (zero) in the Value data area, click Decimal in the Base area, and then click OK.
|
| 7. | Close Registry Editor.
|