Security 10816 Published by

A new variant of the originally reported vulnerability has been
found. The patch has been updated to address both the original and new variants.

Issue
A remote denial of service vulnerability has been discovered in a component of Microsoft(r) NetMeeting. The denial of service can occur when a malicious client sends a particular malformed string to a port which the NetMeeting service is listening on and with Remote Desktop Sharing enabled.

Although the NetMeeting application is provided as part of Windows(r) 2000 products, the application and affected component is not enabled by default, and customers who have not enabled it would not be at risk >from this vulnerability.

A patch is available to fix this vulnerability. Please read the Security Bulletin http://www.microsoft.com/technet/security/bulletin/ms00-077.asp for information on obtaining this patch.