Security 10756 Published by

Microsoft has released a patch that eliminates a security vulnerability in Microsoft® Windows Media Services. The vulnerability could allow a malicious user to degrade the performance of a Windows Media server, possibly to the point where it could no longer provide useful service.

Frequently asked questions regarding this vulnerability and the patch can be found at http://www.microsoft.com/technet/security/bulletin/fq00-097.asp

Affected Software Versions
Microsoft Windows Media Services 4.0
Microsoft Windows Media Services 4.1

Patch Availability
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=26470

Note: Windows Media Services 4.1 ships as part of Windows 2000, and the patch for Windows Media Services 4.1 can be applied atop Windows 2000 Gold or SP1. The fix will be incorporated into Windows 2000 SP3.

Note: Windows Media Services 4.0 does not ship as part of any other product. The patch for Windows Media Services 4.0 can be applied to any machine already running the product, and will not be included in any other product´s future service packs.