Security Advisory 971778

[Corrine]

Microsoft has released Security Advisory 971778 directed to a vulnerability in Microsoft DirectShow which could allow remote code execution if a specially crafted QuickTime media file is opened.

Microsoft is aware of limited, active attacks that use this exploit code. At this point in the investigation so far Windows 2000 Service Pack 4, Windows XP, and Windows Server 2003 are vulnerable. All versions of Windows Vista and Windows Server 2008 are not vulnerable.

Advisory:  http://www.microsoft.com/technet/security/advisory/971778.mspx

If you use Windows 2000 Service Pack 4, Windows XP, and Windows Server 2003, see this Fix it: Microsoft Security Advisory: Vulnerability in Microsoft DirectShow could allow remote code execution