Microsoft: Vulnerability in Microsoft DirectShow

Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution

Microsoft is investigating new public reports of a new vulnerability in Microsoft DirectX. The vulnerability could allow remote code execution if user opened a specially crafted QuickTime media file. Microsoft is aware of limited, active attacks that use this exploit code.

While our investigation is ongoing, our investigation so far has shown that Windows 2000 Service Pack 4, Windows XP, and Windows Server 2003 are vulnerable; all versions of Windows Vista and Windows Server 2008 are not vulnerable. Microsoft has activated its Software Security Incident Response Process (SSIRP) and is continuing to investigate this issue.
Upon completion of this investigation, Microsoft will take the appropriate action to help protect our customers. This may include providing a security update through our monthly release process or providing an out-of-cycle security update, depending on customer needs.

More: Microsoft Security Advisory (971778)

Thanks, Stay Tuned

-ViruSoul

Related posts:

1. Microsoft: Bing, Next big search engine from Microsoft.
2. iTunes Updated, Jailbreakers Beware
3. Yahoo!’s micro blogging service MEME
4. Facebook sells 1.96 percent stake for $200 million