Re: which security hotfixs to implemet ?

["Gethin Jones" <gethinj () gethin net>]

The only way to remove Media Player is not to install it.
There isn't really a clean way to uninstall.
The best way is to use a Pre-Installation file leaving out all the 
unnecessary applications.

Gethin Jones
IT Security Consultant

Tel.   01869 354 098
Cell.  07796 444 141
MSN gethinj () hotmail com
PGP  8537 0419 75DC EC62 4959  3303 3669 049B F2E9 3C48
----- Original Message ----- 
From: "Prasanna M" <PrasannaM () catsglobal co in>
To: "'Craig Woodward '" <secfreak () hotmail com>; 
<security-basics () securityfocus com>
Cc: "'Jacob Weeks '" <jaweeks () gmail com>; "'Steve Fletcher '" 
<safletcher () insightbb com>
Sent: Thursday, November 25, 2004 6:18 AM
Subject: RE: which security hotfixs to implemet ?


> My first reaction was also to ask why unnecessary software/services were
> present, but then I checked and now I am not sure if there is a clean way 
> to
> remove the "basic" media player(v6.4)? I checked out the services,windows
> components,add/remove progs. The only place that was left was to delete 
> the
> files and remove from registry?
> Do let me know if there is another way to get this done.
>
> Prasanna
>
> -----Original Message-----
> From: Craig Woodward
> To: security-basics () securityfocus com
> Sent: 11/25/2004 12:59 AM
> Subject: Re: which security hotfixs to implemet ?
>
> At the risk of sounding petulant, why keep Media player installed if
> there's
> no intention of using it?
> Quite a few of the exploits detail whether they are exploitable if the
> application is present, even if not in use.  It would be best to read
> the
> details for each update to see if they apply to you.
>
> Craig
>
> ----- Original Message ----- 
> From: "Juan B" <juanbabi () yahoo com>
> To: <security-basics () securityfocus com>
> Sent: Tuesday, November 23, 2004 6:16 AM
> Subject: which security hotfixs to implemet ?
>
>
> > Hi,
> > I ran microsoft baseline security against our IIS web
> > servers.
> > the output ( for example) on some servers was that
> > there are some critical updates related to windows
> > media player which I need to implement ,my question
> > is: Do I really need to implement fixes to
> > applications that I dont use ( but still are installed
> > on the server) on those servers (like windwos media
> > player that we dont use on our web servers? ).
> >
> > thanks !
> >
> >
> >
> >
> > __________________________________
> > Do you Yahoo!?
> > Meet the all-new My Yahoo! - Try it today!
> > http://my.yahoo.com