Computer/Windows

I received notice of the following update for Microsoft Windows regarding a flaw in the Microsoft Media Player application. Please visit http://windowsupdate.microsoft.com/ to install this security update.

From Microsoft.com...

MS03-017: Flaw in Windows Media Player Skins Downloading Could Allow Code Execution

Microsoft Windows Media Player provides functionality to change the overall appearance of the player itself through the use of "skins". Skins are custom overlays that are made up of collections of one or more files of computer art that is organized by an XML file. The XML file tells Windows Media Player how to use these files to display a skin as the user interface. In this manner, the user can choose from a variety of standard skins. Each skin provides an additional visual experience. Although Windows Media Player comes with several standard skins that users can choose, it is relatively easy to create and distribute custom skins. A flaw exists in the way Windows Media Player 7.1 and Windows Media Player for Windows XP handle the download of skin files. The flaw means that a malicious user (referred to as an "attacker") could force a file that masquerades as a skin file into a known location on a user's computer. This could allow an attacker to save and then start a malicious executable file on the system.

Read the entire article