You are currently offline, waiting for your internet to reconnect

Microsoft Security Advisory: Description of the AppCompat update for Indeo codec: December 08, 2009

Support for Windows XP has ended

Microsoft ended support for Windows XP on April 8, 2014. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

Support for Windows Server 2003 ended on July 14, 2015

Microsoft ended support for Windows Server 2003 on July 14, 2015. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you implement this workaround, take any appropriate additional steps to help protect the computer.
INTRODUCTION
Microsoft has released a Microsoft security advisory about this issue for IT professionals. The security advisory contains additional security-related information. To view the security advisory, visit the following Microsoft Web site:
MORE INFORMATION

Update information

How to obtain this update

The following files are available for download from the MicrosoftDownload Center:

All supported editions of Microsoft Windows 2000 Service Pack 4

DownloadDownload the Windows2000-KB955759-x86-ENU.exe package now.

All supported x86-based versions of Windows XP

DownloadDownload the WindowsXP-KB955759-x86-ENU.exe package now.

All supported x86-based versions of Windows Server 2003

DownloadDownload the WindowsServer2003-KB955759-x86-ENU.exe package now.

All supported x64-based versions of Windows Server 2003 and of Windows XP Professional x64 Edition

DownloadDownload the WindowsServer2003.WindowsXP-KB955759-x64-ENU.exe package now.

All supported IA-64-based versions of Windows Server 2003

DownloadDownload the WindowsServer2003-KB955759-ia64-ENU.exe package now.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows 2000 file information

For all supported editions of Microsoft Windows 2000 Service Pack 4
File nameFile versionFile sizeDateTimePlatform
Aclayers.dll5.0.2195.7358288,52820-Nov-200904:35x86
Sysmain.sdbNot Applicable336,73820-Nov-200904:01Not Applicable

Windows XP and Windows Server 2003 file information

  • The files that apply to a specific service branch (QFE, GDR) are noted in the "Service branch" column.
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. QFE service branches contain hotfixes in addition to widely released fixes.
  • In addition to the files that are listed in these tables, this update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.
For all supported x86-based versions of Windows XP
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Aclayers.dll5.1.2600.3647470,52821-Nov-200916:36x86SP2SP2GDR
Sysmain.sdbNot Applicable1,196,00021-Nov-200916:36Not ApplicableSP2SP2GDR
Acadproc.dll5.1.2600.354339,42425-Mar-200905:54x86SP2SP2QFE
Aclayers.dll5.1.2600.3647470,52821-Nov-200916:24x86SP2SP2QFE
Sysmain.sdbNot Applicable1,201,02821-Nov-200916:25Not ApplicableSP2SP2QFE
Aclayers.dll5.1.2600.5906471,55221-Nov-200915:51x86SP3SP3GDR
Sysmain.sdbNot Applicable1,206,50821-Nov-200915:51Not ApplicableSP3SP3GDR
Aclayers.dll5.1.2600.5906471,55221-Nov-200915:40x86SP3SP3QFE
Sysmain.sdbNot Applicable1,206,50821-Nov-200915:41Not ApplicableSP3SP3QFE
For all supported x86-based versions of Windows Server 2003
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Spupdsvc.exe6.3.4.123,85601-Mar-200705:47x86NoneNot Applicable
Aclayers.dll5.2.3790.4624421,37621-Nov-200914:48x86SP2SP2GDR
Sysmain.sdbNot Applicable1,364,22621-Nov-200914:55Not ApplicableSP2SP2GDR
Aclayers.dll5.2.3790.4624421,37621-Nov-200914:07x86SP2SP2QFE
Sysmain.sdbNot Applicable1,364,03821-Nov-200914:14Not ApplicableSP2SP2QFE
For all supported x64-based versions of Windows Server 2003 and of Windows XP Professional x64 Edition
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Spupdsvc.exe6.3.4.125,90421-Nov-200913:07x64NoneNot Applicable
Sysmain.sdbNot Applicable19,47421-Nov-200912:54Not ApplicableSP2SP2GDR
Waclayers.dll5.2.3790.4624421,37621-Nov-200912:54x86SP2SP2GDR\WOW
Wsysmain.sdbNot Applicable1,364,22621-Nov-200912:54Not ApplicableSP2SP2GDR\WOW
Sysmain.sdbNot Applicable19,83821-Nov-200912:52Not ApplicableSP2SP2QFE
Waclayers.dll5.2.3790.4624421,37621-Nov-200912:52x86SP2SP2QFE\WOW
Wsysmain.sdbNot Applicable1,364,03821-Nov-200912:52Not ApplicableSP2SP2QFE\WOW
For all supported IA-64-based versions of Windows Server 2003
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Spupdsvc.exe6.3.4.139,72821-Nov-200913:06IA-64NoneNot Applicable
Sysmain.sdbNot Applicable19,11821-Nov-200912:53Not ApplicableSP2SP2GDR
Waclayers.dll5.2.3790.4624421,37621-Nov-200912:53x86SP2SP2GDR\WOW
Wsysmain.sdbNot Applicable1,364,22621-Nov-200912:53Not ApplicableSP2SP2GDR\WOW
Sysmain.sdbNot Applicable19,48221-Nov-200912:49Not ApplicableSP2SP2QFE
Waclayers.dll5.2.3790.4624421,37621-Nov-200912:49x86SP2SP2QFE\WOW
Wsysmain.sdbNot Applicable1,364,03821-Nov-200912:49Not ApplicableSP2SP2QFE\WOW

Additional information about this security update

Re-enable the Indeo functionality after this security update is installed

Warning This workaround may make a computer or a network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

This security update disables some Indeo functionality by not letting Windows Internet Explorer or Windows Media Player use the codec. Certain users may require this functionality and can re-enable this functionality of the Indeo codec. To do this, users can revert the registry key changes that this security update makes. The registry key changes are different on the different versions of the Windows operating system.

Note Reverting the registry key changes may expose the user to security issues and weaken the security profile of the computer.

To revert the APPCOMPAT mitigation without uninstalling the security update, please see the following directions that are appropriate for your computer.
Windows 2000
Delete or rename the following registry subkeys.
ComponentRegistry subkey
Iexplore.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\AppCompatibility\Iexplore.exe
Wmplayer.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\AppCompatibility\Wmplayer.exe
Mplayer2.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\AppCompatibility\Mplayer2.exe
Mplay32.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\AppCompatibility\Mplay32.exe
Windows XP
Create the following registry subkeys.
ComponentRegistry subkey
Iexplore.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {5042648C-F439-468D-859B-6CD12BA02D3A}
Value data: (hex) 0x00000001
Wmplayer.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {46676BCD-88EB-42E1-B542-6929118E8029}
Value data: (hex) 0x00000001
Mplayer2.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {F1DAD733-5C90-4212-AE22-FFDAEB2C5004}
Value data: (hex) 0x00000001
Mplayer32.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {A5153E0F-B708-46AD-9011-8BE6CA921340}
Value data: (hex) 0x00000001
Windows Server 2003, x86-based and x64-based versions
Create the following registry subkeys.
ComponentRegistry subkey
Iexplore.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {5042648C-F439-468D-859B-6CD12BA02D3A}
Value data: (hex) 0x00000001

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {5042648C-F439-468D-859B-6CD12BA02D3A}
Value data: (hex) 0x00000001

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {A731342D-6D9B-4FE5-970D-5A3D0B6BBB6C}
Value data: (hex) 0x00000001

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {A731342D-6D9B-4FE5-970D-5A3D0B6BBB6C}
Value data: (hex) 0x00000001
Wmplayer.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {46676BCD-88EB-42E1-B542-6929118E8029}
Value data: (hex) 0x00000001

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {46676BCD-88EB-42E1-B542-6929118E8029}
Value data: (hex) 0x00000001

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {405BCD49-9AAE-47C8-8E30-A8A504B626CB}
Value data: (hex) 0x00000001

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {405BCD49-9AAE-47C8-8E30-A8A504B626CB}
Value data: (hex) 0x00000001
Mplayer2.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {F1DAD733-5C90-4212-AE22-FFDAEB2C5004}
Value data: (hex) 0x00000001

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {F1DAD733-5C90-4212-AE22-FFDAEB2C5004}
Value data: (hex) 0x00000001

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {75A1B058-2189-422D-A967-F7AFF142237C}
Value data: (hex) 0x00000001

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

REG_DWORD: {75A1B058-2189-422D-A967-F7AFF142237C}
Value data: (hex) 0x00000001
Mplayer32.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
REG_DWORD: {A5153E0F-B708-46AD-9011-8BE6CA921340}
Value data: (hex) 0x00000001

HKEY_LOCAL_MACHINE\SOFTWARE\ Wow6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
REG_DWORD: {A5153E0F-B708-46AD-9011-8BE6CA921340}
Value data: (hex) 0x00000001

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
REG_DWORD: {5B8661D5-ECE1-4BD9-93E8-5B7E56544EE2}
Value data: (hex) 0x00000001

HKEY_LOCAL_MACHINE\SOFTWARE\ Wow6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
REG_DWORD: {5B8661D5-ECE1-4BD9-93E8-5B7E56544EE2}
Value data: (hex) 0x00000001
update security_patch security_update security bug flaw vulnerability malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service DoS TSE
Properties

Article ID: 955759 - Last Review: 12/09/2009 03:48:13 - Revision: 3.0

  • Microsoft Windows 2000 Service Pack 4
  • Microsoft Windows Server 2003 Service Pack 2
  • Microsoft Windows XP Service Pack 3
  • Microsoft Windows XP Service Pack 2
  • kbsecadvisory kbsecurity kbsurveynew kbfix kbbug atdownload kbexpertiseinter KB955759
Feedback