IT Help Central - Division of Information Technology
Texas Tech University

HELP!!!

IT Help Central

[ Hours of Operation ]
[ Safe Computing ]
[ Customer Survey ]
[ Security Bulletins ]
[ Instructions ]
[ Request Assistance ]
[ Our Team ]
[ Employment ]
[ Strategic Plan ]
[ Site Map ]

Related Sites

[ Texas Tech ]
[ IT Division ]
[ High Tech ]
[ Raiderlink ]
[ Computer Labs ]
[ Training ]
[ TTUHSC Help Desk ]
[ Network Access ]

General Info

[ New Students ]
[ Text-Only Version ]
[ Buying the Right Computer ]

ASC
Room 101
2903 4th Street

This update resolves a newly-discovered, privately-reported vulnerability.

A remote code execution vulnerability exists in the Windows Media Player plug-in for non-Microsoft Internet browsers because of the way the Windows Media Player plug-in handles a malformed EMBED element. An attacker could exploit the vulnerability by constructing a malicious EMBED element that could potentially allow remote code execution if a user visited a malicious Web site. An attacker who successfully exploited this vulnerability could take complete control of an affected system.

Microsoft recommends that customers should update at the earliest opportunity.

Affected Software:

• Windows 2000 SP4
• Windows XP SP1 / SP2
• Windows Server 2003
• Windows XP Professional x64 Edition
• Windows Server 2003 x64 Edition

Non-Affected Software:

• Windows Server 2003 for Itanium-based Systems
• Windows 98, 98 SE, and ME

It is recommended that you view the full article related to this vulnerability at Microsoft.com.

Quick Fix Instructions

1. Download the patches appropriate for your system below.
2. Save the file to a convenient location, such as your download folder or the Windows desktop.
3. Close all programs before you run the tool.
4. Double-click the file to start the update tool.
5. Follow the On-Screen Instructions

Most Common Versions

• Windows 2000 SP4
• Windows XP SP1 / SP2
• Windows Server 2003
• Windows XP Professional x64 Edition
• Windows Server 2003 x64 Edition

Note:  You can configure Windows 2000 and XP to automatically download and install new critical updates.  For instructions on configuring automatic updates, click here.

Released 02/14/2006