Vole ferrets out three new flaws in Media Player

MICROSOFT HAS REPORTED finding three security flaws in Media Player. One flaw is critical, the software maker says.

The 'vulnerabilities' afflict Windows Media Player versions 6.4, 7.1 and Media Player for Windows XP.

The most serious vulnerability "could provide the means to enable an attacker to run code on the user's system and is rated as critical severity", Microsoft confesses.

A second is a "privilege elevation vulnerability" that could enable an attacker who can physically logon locally to a Windows 2000 machine and run a program to obtain the same rights as the operating system.

The third, a script execution vulnerability, is rated as low severity

Micorosoft has posted patches for each of the different versions of MP affected, which you can find at these locations:

Microsoft Windows Media Player 6.4
Microsoft Windows Media Player 7.1
Microsoft Windows Media Player for Windows XP

The software maker didn't reveal any flaws it doesn't have fixes for. µ