CERT mailing list archives

Current Activity - Microsoft Releases Security Advisory 954157


From: Current Activity <us-cert () us-cert gov>
Date: Fri, 11 Dec 2009 14:18:26 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

US-CERT Current Activity

Microsoft Releases Security Advisory 954157

Original release date: December 11, 2009 at 2:06 pm
Last revised: December 11, 2009 at 2:06 pm


Microsoft has released security advisory 954157 to notify users of an
update that increases the security of the Indeo codec on Microsoft
Windows 2000, XP, and Server 2003. The advisory states that the Indeo
codec running on these systems may allow remote code execution when
opening specially crafted media content. Microsoft indicates that this
update blocks the Indeo codec from being launched in Internet Explorer
or Windows Media player, which removes a potential attack vector.

US-CERT encourages users and administrators to review Microsoft
security advisory 954157 and apply any necessary updates or
workarounds to help mitigate the risks.

Relevant Url(s):
<http://www.microsoft.com/technet/security/advisory/954157.mspx>

====
This entry is available at
http://www.us-cert.gov/current/index.html#microsoft_releases_security_advisory_954157

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBSyKa9tucaIvSvh1ZAQJjYggArLHCU+MynUyIv+cYQTb0KEUiINPD+P1k
vc9O8IOBl2ql1jj6qUjmAa847e3lOo3y8FylP/DiKOHl36rCGQ8tFvUTiCj6CLEF
Dsa5BeJ0WAMP9TzTSulyeDwrR0zy7v/brpUsG1R55IY66XHezd+hLNVHihnbuxz9
Da3RlodHqTmB7CbmwxTS6cmaIRNtCovLvlfEYI/W16Jn9Nq+Xtxw36eiQbVWx3Bf
ut0ZOKvM4keF505hW4avqanNATbqu9tNO+2NmGRiVpTuQAhX7H7c/6gHlJ/+A17g
7OL97H3vR5yBCIbp1G13MiZ+4ajr2fIhe2oQCmNA2AgJlazlXwXIrA==
=Hgi5
-----END PGP SIGNATURE-----


Current thread: