News

Microsoft Updates Windows Media Player Patch

Microsoft published an update to a Windows Media Player patch on Tuesday, the same day as its January general security update release.

Microsoft published an update to a Windows Media Player patch on Tuesday, the same day as its January general security update release.

At issue is a glitch that results in an incomplete installation of December's MS08-076 Windows Media Component patch on Windows XP systems running Windows Media Format Runtime 9.5. The bulletin addendum, dated Jan. 13, is supposed to fix that glitch.

The revised bulletin also now lists Windows Media Player 6.4 and Windows Media Services 4.1 as affected for all editions of Microsoft Windows 2000 Service Pack 4 -- not just for Microsoft Windows 2000 Server SP4.

The update comes just weeks after Microsoft spokesperson Christopher Budd adamantly denied a report detailing a potential remote code execution hole in Windows Media Player. Security researcher Laurent Gaffi had described a vulnerability that could be used by hackers armed with malformed .wav, .snd, or .mid audio files to compromise a PC running Windows XP or Vista.

Budd negated that security claim, but he did confirm that Gaffi's proof-of-concept code could trigger a crash of the Windows-based app. Budd added that Windows Media Player can be restarted without harming the operating system. He suggested that the security update would fix the loose ends.

Researchers at Microsoft's Research and Defense group spelled out in mathematical and technological language how that the particular flaw mentioned by Gaffi is not a threat.

About the Author

James LaTour, MCSE, is a consultant for Trinity Consulting, a Microsoft Certified Gold Partner in Marlborough, Mass. He brings a wealth of health care experience to Trinity's HIPAA practice. In his spare time, he volunteers as webmaster and administrator for MARX7.org, the Massachusetts Area RX-7 and Rotary Powered Club, a non-profit automobile enthusiast club in the New England area. Reach him at [email protected].

Featured

  • Windows 365 Cloud Apps Now Available for Public Preview

    Microsoft announced this week that Windows 365 Cloud Apps are now available for public preview. This aims to allow IT administrators to stream individual Windows applications from the cloud, removing the need to assign Cloud PCs to every user.

  • Report: Security Initiatives Can't Keep Pace with Cloud, AI Boom

    The increasingly fast adoption of hybrid, multicloud, and AI systems is easily outgrowing existing security measures, according to a recent global survey by the Cloud Security Alliance (CSA) and exposure management firm Tenable.

  • World Map Image

    Microsoft Taps Nebius in $17B AI Infrastructure Deal To Alleviate Cloud Strain

    Microsoft has signed a five-year, $17.4 billion agreement with Amsterdam-based Nebius Group to expand its AI computing capabilities through third-party GPU infrastructure.

  • Microsoft Brings Copilot AI Into Viva Engage

    Microsoft 365 Copilot in Viva Engage is now generally available, extending Copilot's AI-powered assistant capabilities deeper into the Viva platform.

Most   Popular