TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
(MS08-076) Vulnerabilities in Windows Media Components Could Allow Remote Code Execution (959807)
Vulnerability Identifier: CVE-2008-3009; CVE-2008-3010
Discovery Date: Dec 9, 2008
Risk: Important
Affected Software:
  • Microsoft Windows 2000 Server Service Pack 4
  • Microsoft Windows 2000 Service Pack 4
  • Microsoft Windows Media Format 9.5
  • Microsoft Windows Server 2003 Service Pack 1
  • Microsoft Windows Server 2003 Service Pack 2
  • Microsoft Windows XP Professional x64 Edition
  • Microsoft Windows XP Professional x64 Edition Service Pack 2
  • Microsoft Windows XP Service Pack 2
  • Microsoft Windows XP Service Pack 3
  • Windows Media Format Runtime 11
  • Windows Media Format Runtime 11 (Windows Server 2008 for 32-bit Systems)
  • Windows Media Format Runtime 11 (Windows Server 2008 for x64-based Systems)
  • Windows Media Format Runtime 11 (Windows Vista Service Pack 1)
  • Windows Media Format Runtime 11 (Windows Vista x64 Edition Service Pack 1)
  • Windows Media Format Runtime 11 (Windows Vista x64 Edition)
  • Windows Media Format Runtime 11 (Windows Vista)
  • Windows Media Format Runtime 11 (Windows XP Professional x64 Edition and Windows XP Professional x64 Edition Service Pack 2)
  • Windows Media Format Runtime 11 (Windows XP Service Pack 2)
  • Windows Media Format Runtime 11 (Windows XP Service Pack 3)
  • Windows Media Format Runtime 11 x64 Edition (Windows Server 2003 x64 Edition and Windows Server 2003 x64 Edition Service Pack 2)
  • Windows Media Format Runtime 7.1 (Microsoft Windows 2000 Service Pack 4)
  • Windows Media Format Runtime 9 (Windows 2000 Service Pack 4)
  • Windows Media Format Runtime 9 (Windows XP Service Pack 2)
  • Windows Media Format Runtime 9.0
  • Windows Media Format Runtime 9.0 (Windows XP Service Pack 3)
  • Windows Media Format Runtime 9.5
  • Windows Media Format Runtime 9.5 (Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2)
  • Windows Media Format Runtime 9.5 (Windows Server 2003 x64 Edition and Windows Server 2003 x64 Edition Service Pack 2)
  • Windows Media Format Runtime 9.5 (Windows XP Service Pack 2)
  • Windows Media Format Runtime 9.5 x64 Edition (Windows Server 2003 x64 Edition and Windows Server 2003 x64 Edition Service Pack 2)
  • Windows Media Format Runtime 9.5 x64 Edition (Windows XP Professional x64 Edition and Windows XP Professional x64 Edition Service Pack 2)
  • Windows Media Services 2008 (Windows Server 2008 for 32-bit Systems)
  • Windows Media Services 2008 (Windows Server 2008 for x64-based Systems)
  • Windows Media Services 4.1 (Microsoft Windows 2000 Server Service Pack 4)
  • Windows Media Services 9 Series (Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2)
  • Windows Media Services 9 Series (Windows Server 2003 x64 Edition and Windows Server 2003 x64 Edition Service Pack 2)
  • Windows Server 2003 SP1
  • Windows Server 2003 x64 Edition and Windows Server 2003 x64 Edition Service Pack 2
Description:

This security update resolves two privately reported vulnerabilities in the following Windows Media components: Windows Media Player, Windows Media Format Runtime, and Windows Media Services. The most severe vulnerability could allow remote code execution.

If a user is logged on with administrative user rights, a remote malicious user who successfully exploits this vulnerability could take complete control of an affected system. The said malicious user could then install programs; view, change, or delete data; or create new accounts with full user rights.

Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.


Patch Information:

Patches for this vulnerability can be downloaded on this Microsoft Web page.
 
Search for another Security Advisory
Keyword: