Severity Rating: Critical – Revision Note: V1.1 (October 7, 2009): Corrected command lines for the workaround, “Deny access to Avifil32.dll.”Summary: This security update resolves two privately reported vulnerabilities in Windows Media file processing. Either vulnerability could allow remote code execution if a user opened a specially crafted AVI file. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system.

MS09-038 – Critical: Vulnerabilities in Windows Media File Processing Could Allow Remote Code Execution (971557) – Version:1.1

Related posts

• MS09-045 – Critical: Vulnerability in JScript Scripting Engine Could Allow Remote Code Execution (971961) – Version:1.1 (0)
• MS09-041 – Important: Vulnerability in Workstation Service Could Allow Elevation of Privilege (971657) – Version:1.0 (0)
• MS09-047 – Critical: Vulnerabilities in Windows Media Format Could Allow Remote Code Execution (973812) – Version:1.1 (0)
• MS09-046 – Critical: Vulnerability in DHTML Editing Component ActiveX Control Could Allow Remote Code Execution (956844) – Version:1.0 (0)
• MS05-018: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege and Denial of Service (890859) – Version:1.1 (0)