Windows Media Player ActiveX Control Two Vulnerabi

[Mobo]

1) An error in the "getItemInfoByAtom()" function in the Windows Media Player ActiveX control can be exploited by e.g. a malicious web site to determine the presence and size of local files.

2) Some errors in the "setItemInfo()" and "getItemInfo()" functions in the Windows Media Player ActiveX control can be exploited by e.g. a malicious web site to modify or disclose local media information (e.g. artist, album, and song name of a .wma file).

The vulnerabilities have been confirmed on a fully patched system with Microsoft Windows Media Player 9 and Microsoft Windows 2000 SP4 / XP SP1 / XP SP2.

Solution:
Microsoft Windows XP:
Update to version 10.
http://www.microsoft.com/downloa...-cde4bb...&displaylang=en

Set security level to high for the "Internet" zone (disable ActiveX support).