Critical flaw in Windows music program

[guyver01]

Critical flaw in Windows music program

Microsoft has issued a patch for a new, critical flaw in Windows that could allow an attacker to take control of a victim's computer or run malicious programs on it, the company said.

If exploited, the flaw could allow an attacker to delete files, search records, send e-mails or even launch a new attack from the victim's computer.

The problem involves how a technology in DirectX -- a group of instructions used by Windows programs to play audio and video -- handles MIDI (musical instrument digital interface) files.

The patch can be downloaded here:

Windows XP Security Patch: Buffer Overrun In RPC Interface Could Allow Code Execution

The corresponding security bulletin is here:

Microsoft Security Bulletin MS03-026

 

[MournSanity]

*Yawn*, this happens like every-freakin-day.

 

[Harvey]

The answer is simple... Windoze Update.

 

[guyver01]

Originally posted by: Harvey
The answer is simple... Windoze Update.

the only problem... this 'critical update' hasn't made it into the Windows Update wizard yet.

 

[MournSanity]

Originally posted by: Harvey
The answer is simple... Windoze Update.

The answer is simpler than that.... Linux.

 

[Tom]

Originally posted by: guyver01

Originally posted by: Harvey
The answer is simple... Windoze Update.

the only problem... this 'critical update' hasn't made it into the Windows Update wizard yet.

Seems to be on Windows Update when I just checked. It's 819696, right ?

 

[guyver01]

Originally posted by: Dead Parrot Sketch

Originally posted by: guyver01

Originally posted by: Harvey
The answer is simple... Windoze Update.

the only problem... this 'critical update' hasn't made it into the Windows Update wizard yet.

Seems to be on Windows Update when I just checked. It's 819696, right ?

nope.
823980

 

[Tom]

Well, the link in the original article goes to 819696, which is newer than 823980..

but I just checked and Windows update installed 823980 back on Wednesday, so it must have been available there.

 

[guyver01]

Originally posted by: Dead Parrot Sketch
Well, the link in the original article goes to 819696, which is newer than 823980..

but I just checked and Windows update installed 823980 back on Wednesday, so it must have been available there.

Buffer Overrun In RPC Interface Could Allow Code Execution (823980)
Originally posted: July 16, 2003
Revised: July 21, 2003


yup.. looks like you're right on that.

 

[BillGates]

I thought the critical flaw was that it SUCKED.