MS06-078: Vulnerability in Windows Media Format could allow remote code execution

Microsoft has released security bulletin MS06-078. The security bulletin contains all the relevant information about the security update. This information includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites:Note As of July 10, 2007, security update for 925398 can be installed on Microsoft Windows Server 2003 Service Pack 2 to help secure Windows Media Player 6.4. This is documented in revision 3.0 of security bulletin MS06-078. Customers who did experience this known issue and who did not install this security update will be reoffered the security update that is included with security bulletin MS06-078. The security update previously did not correctly allow customers to install security update 925398 on Microsoft Windows Server 2003 Service Pack 2. MBSA and SMS will offer security update 925398 to customers with Microsoft Windows Server 2003 Service Pack 2. We recommend that customers apply the update immediately. No action is required on systems where the security update has been successfully installed. For more information, visit the following Microsoft Web site:
security_patch security_update bug flaw malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service DoS TSE Win2000
Author: secure; kariz
Writer: v-chsu
Tech reviewer: secure; kbsec
Editor: v-valedo

Article ID: 925398 - Last Review: 09/30/2011 02:47:00 - Revision: 5.0

Microsoft Windows Media Player 6.4

  • kbexpertiseinter kbexpertisebeginner kbqfe kbsecurity kbsecbulletin kbsecvulnerability kbbug kbfix kbwin2000presp5fix KB925398