This article describes the following security issue in NetMeeting, and the patch that addresses the issue:

•	"Speed Dial" issue

Back to the top

"Speed Dial" issue

Microsoft has posted a fix to protect NetMeeting customers against a potential problem known as the "Speed Dial" issue. This issue can cause NetMeeting to stop responding (hang) if a malicious Web page author links to a specially-edited NetMeeting speed dial entry. Once NetMeeting stops responding, a knowledgeable developer could run arbitrary code in the computer's memory. This issue affects the following versions of NetMeeting:

•	NetMeeting versions 1.0, 2.0, 2.1 for Windows 95
•	NetMeeting versions 2.0, 2.1 for Windows NT 4.0 on the following platforms: x86, Alpha

There have been no reports of customers being affected by this bug.

For additional information (or to download the patch), please see the following Microsoft Web site: The following versions of this patch are available on Microsoft's Web site:

Note These tables list only the U.S. versions of the patch. Updates for other language versions will be available at a later date.

Windows 95:

   Patch name     NetMeeting version   File updated   Updated file version
   -----------------------------------------------------------------------

   Nmsecp10.exe   NetMeeting 1.0       Conflnk.dll    4.00.1134
   Nmsecp20.exe   NetMeeting 2.0       Msconf.dll     4.00.1373
   Nmsecp21.exe   NetMeeting 2.1       Msconf.dll     4.3.2205
				

Windows NT 4.0 (x86):

   Patch name     NetMeeting version   File updated   Updated file version
   -----------------------------------------------------------------------

   Nmsecp21.exe   NetMeeting 2.1       Msconf.dll     4.3.2205
				

Windows NT 4.0 (Alpha):

   Patch name     NetMeeting version
   ---------------------------------

   Nmsecp20.exe   NetMeeting 2.0
   Nmsecp21.exe   NetMeeting 2.1
				

Note This patch is included in the latest version of NetMeeting 2.1 for Windows 95 and Windows NT 4.0. If NetMeeting is not currently installed on your computer, you can download the latest version of NetMeeting 2.1 from the following Microsoft Web site: Note The Microsoft Windows 98 Windows Update site has the latest NetMeeting build 2203, which includes the security fix. The security fix can be identified by the file Msconf.dll, version 4.3.2205. Currently, when you access the Windows Update site, NetMeeting is not listed if NetMeeting is already installed on your computer.

Back to the top