----------------------------------------------------------------------

Do you have VARM strategy implemented?

(Vulnerability Assessment Remediation Management)  

If not, then implement it through the most reliable vulnerability
intelligence source on the market. 

Implement it through Secunia. 

For more information visit:
http://secunia.com/advisories/business_solutions/

Alternatively request a call from a Secunia representative today to
discuss how we can help you with our capabilities contact us at:
sales@secunia.com

----------------------------------------------------------------------

TITLE:
Microsoft Windows Media Player ASF Processing Vulnerability

SECUNIA ADVISORY ID:
SA36944

VERIFY ADVISORY:
http://secunia.com/advisories/36944/

DESCRIPTION:
A vulnerability has been reported in Microsoft Windows Media Player,
which can be exploited by malicious people to compromise a user's
system.

The vulnerability is caused due to an unspecified error in the
processing of ASF files. This can be exploited to cause a heap-based
buffer overflow via a specially crafted ASF file.

Successful exploitation allows execution of arbitrary code.

SOLUTION:
Apply patches.

Microsoft Windows 2000 SP4 with Windows Media Player 6.4:
http://www.microsoft.com/downloads/details.aspx?familyid=13035ef7-7e47-487c-8b7c-7795d33ce7de

Windows XP SP2/SP3 with Windows Media Player 6.4:
http://www.microsoft.com/downloads/details.aspx?familyid=b2efe1ac-d8d7-41bb-b87d-fc5e22afef0f

Windows XP Professional x64 Edition SP2 with Windows Media Player
6.4:
http://www.microsoft.com/downloads/details.aspx?familyid=a9e7dfd8-7ba1-4f14-8e60-92ef00d91467

Windows Server 2003 SP2 with Windows Media Player 6.4:
http://www.microsoft.com/downloads/details.aspx?familyid=5f82d01c-573e-425e-b9f2-86a54f377b19

Windows Server 2003 x64 Edition SP2 with Windows Media Player 6.4:
http://www.microsoft.com/downloads/details.aspx?familyid=65e9036e-2e1b-40ff-a84b-c507107bcce8

PROVIDED AND/OR DISCOVERED BY:
The vendor credits Yamata Li of Palo Alto Networks.

ORIGINAL ADVISORY:
Microsoft (KB974112):
http://www.microsoft.com/technet/security/Bulletin/MS09-052.mspx

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------