Home / bulletins

MS06-078: Vulnerability in Windows Media Format Could Allow Remote Code Execution (923689) - Version:2.2

Posted on 27 June 2007

There is an newer version: MS06-078 - Version: 6.1

Severity Rating: Critical - Revision Note: Bulletin updated to provide additional clarity around known issues customers may experience when they install this security update: See Microsoft Knowledge Base Article 933065 : Error message when you install the original version of security update 923689 on Korean Windows 2000 and Microsoft Knowledge Base Article 933066 : Error dialog when you install the security update 923689 on Windows XP SP2.Summary: This update resolves two newly discovered vulnerabilities. These vulnerabilities are documented in the "Vulnerability Details" section of this bulletin. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights. We recommend that customers apply the update immediately.

Link

Other versions

 

TOP