MS07-068: Vulnerability in Windows Media file format could allow remote code execution

Microsoft has released security bulletin MS07-068. The security bulletin contains all the relevant information about the security update. This information includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites:

• Home users:
  http://www.microsoft.com/protect/computer/updates/bulletins/200712.msp (http://www.microsoft.com/protect/computer/updates/bulletins/200712.mspx)
  Skip the details
  
  Download the updates for your home computer or laptop from the Microsoft Update Web site now:
  http://update.microsoft.com/microsoftupdate/ (http://update.microsoft.com/microsoftupdate/)
• IT professionals:
  http://www.microsoft.com/technet/security/bulletin/MS07-068.msp (http://www.microsoft.com/technet/security/bulletin/MS07-068.mspx)

This update applies to the following products:

• Windows Media Format Runtime 7.1
• Windows Media Format Runtime 9
• Windows Media Format Runtime 9.5
• Windows Media Format Runtime 9.5 x64 Edition
• Windows Media Format Runtime 11

How to obtain help and support for this security update

For home users, no-charge support is available by calling 1-866-PCSAFETY in the United States and Canada or by contacting your local Microsoft subsidiary. For more information about how to contact your local Microsoft subsidiary for support issues with security updates, visit the Microsoft International Support Web site: North American customers can also obtain instant access to unlimited no-charge e-mail support or to unlimited individual chat support by visiting the following Microsoft Web site: For enterprise customers, support for security updates is available through your usual support contacts.

Known issues with this security update

Consider the following scenario. You install security update MS07-068 on a computer that is running the following items:

• Microsoft Windows 2000 with Service Pack 4
• Windows Media Player version 7.1 or an earlier version of Windows Media Player

In this scenario, Windows Media Player might no longer correctly play some media files. For example, Windows Media Player might not play .mp3 files correctly.

To resolve this problem for Windows 2000 users who require .mp3 functionality in Windows Media Player, we recommend that you upgrade to Windows Media Player version 9 or to a later version. Updated versions of Windows Media Player are available from the Microsoft Download Center, from the Windows Media Player Web page, from Windows Update, or from Microsoft Update.

To obtain Windows Media Player, visit one of the following Microsoft Web sites: For more information about the latest service pack for Windows Vista, click the following article number to view the article in the Microsoft Knowledge Base: