Microsoft has released a patch that eliminates two security
vulnerabilities in Microsoft(r) Windows Media(tm) Player. These
vulnerabilities could potentially enable a malicious user to cause a
program of his choice to run on another user´s computer.

Frequently asked questions regarding this vulnerability
and the patch can be found at
http://www.microsoft.com/technet/security/bulletin/fq00-090.asp

Affected Software Versions
==========================
- Microsoft Windows Media Player 6.4
- Microsoft Windows Media Player 7

Note: The ".ASX Buffer Overrun" affects Windows Media Player versions
6.4 and 7. The ".WMS Script Execution" affects only Windows Media
Player version 7. The patch installs the correct fix(es) for the
particular version of Windows Media Player in use.

Patch Availability
==================
- Windows Media Player 6.4:
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=26069
- Windows Media Player 7:
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=26067

Note: The fix for this issue also will be available as part of the
next periodic update, scheduled for December 2000.