in

eEye Digital Security

The endpoint to vulnerability starts here.

 
eEye Digital Security » Blink Forums » Vulnerability Assessment » Audit ID 7462 MS08-076 Windows Media

Audit ID 7462 MS08-076 Windows Media

Last post 09-21-2009 1:04 PM by jaws. 9 replies.
Page 1 of 1 (10 items)
Sort Posts: Previous Next

  • 09-15-2009 12:57 PM

    • jaws
    • Top 50 Contributor
    • Joined on 09-01-2009
    • Posts 13

    Audit ID 7462 MS08-076 Windows Media

    Reply Contact

     Hi,

    I have installed KB952069 and KB954600.   I am running Windows 2003 with Media Player 10.0.0.3997

    What do I need to update to fix Audit ID 7462 aka MS08-076 aka KB959807 aka CVE-2008-3009 and CVE-2008-3010.

    Could this be a false positive?

    Thanks,

    Jim

  • 09-15-2009 5:10 PM In reply to

    • bpatten
    • Top 10 Contributor
    • Joined on 09-24-2007
    • Irvine, CA
    • Posts 155

    Re: Audit ID 7462 MS08-076 Windows Media

    Reply Contact

    Whats the version of %SystemRoot%\System32\Wmvcore.dll ?

  • 09-16-2009 1:43 AM In reply to

    Re: Audit ID 7462 MS08-076 Windows Media

    Reply Contact

     Windows Media Player should be up to version 11 now.  I am assuming that might be why, but I am not sure if that applies to Windows 2003 server or not.

  • 09-16-2009 5:08 AM In reply to

    • jaws
    • Top 50 Contributor
    • Joined on 09-01-2009
    • Posts 13

    Re: Audit ID 7462 MS08-076 Windows Media

    Reply Contact

     Hi,

      wmvcore.dll is version 10.0.0.4005

      A new retina scan shows the issue still exists.  Reading the MS08-076 notes it does not say anything about Windows Media 10.  This machine is a windows 2003 server and the media player may be old because it is never used.

      Any ideas would be welcome.

    Thanks,

    Jim

  • 09-16-2009 5:15 AM In reply to

    • jaws
    • Top 50 Contributor
    • Joined on 09-01-2009
    • Posts 13

    Re: Audit ID 7462 MS08-076 Windows Media

    Reply Contact

     Hi,

      Checked with Microsoft Windows Media Home page.

      The correct version of Media Player is 10 for windows 2003 server sp1 & sp2.

      http://www.microsoft.com/windows/windowsmedia/player/versions.aspx

      It is looking to me like a false positive for Windows 2003 and media player 10.

      Further advice is welcomed.

    Thanks,

    Jim

  • 09-16-2009 8:21 AM In reply to

    • bpatten
    • Top 10 Contributor
    • Joined on 09-24-2007
    • Irvine, CA
    • Posts 155

    Re: Audit ID 7462 MS08-076 Windows Media

    Reply Contact

    Can you confirm what SP level your 2003  machine has? Also, what audit version or vulnerability version do you have? Help > About.

     

    Thank you

  • 09-16-2009 10:06 AM In reply to

    • jaws
    • Top 50 Contributor
    • Joined on 09-01-2009
    • Posts 13

    Re: Audit ID 7462 MS08-076 Windows Media

    Reply Contact

     

  • 09-18-2009 5:57 AM In reply to

    • jaws
    • Top 50 Contributor
    • Joined on 09-01-2009
    • Posts 13

    Re: Audit ID 7462 MS08-076 Windows Media

    Reply Contact

     

  • 09-18-2009 7:02 AM In reply to

    • jaws
    • Top 50 Contributor
    • Joined on 09-01-2009
    • Posts 13

    Re: Audit ID 7462 MS08-076 Windows Media

    Reply Contact

     

    Hi,

    Running Windows 2003 Enterprise Edition SP2

    Retina Version 5.10.17.2128

    Please see http://support.microsoft.com/kb/952069/  states wmvcore is 10.0.0.4001 for Windows 2003 SP 2

    My version of wmvcore.dll is version 10.0.0.4005

    Also http://support.microsoft.com/kb/968816

    Ahhh.... this may be the cause....  (see below)

    September patch MS09-047 has a new version of wmvcore.dll

    For Windows Media Format Runtime 9.5 on Windows Server 2003 x86 Edition Service Pack 2

    Wmvcore.dll 10.0.0.4005 2,330,624 10-Jun-2009 20:40 x86 SP2 SP2GDR

    Wmvcore.dll 10.0.0.4005 2,330,624 11-Jun-2009 04:59 x86 SP2 SP2QFE

    I am running version 10.0.0.4005 thus furthering my thought that Audit ID 7462 is a false positive.

    Please confirm. 

    Thanks,

    Jim

  • 09-21-2009 1:04 PM In reply to

    • jaws
    • Top 50 Contributor
    • Joined on 09-01-2009
    • Posts 13

    Re: Audit ID 7462 MS08-076 Windows Media

    Reply Contact

     

    Hi,

    Running Windows 2003 Enterprise Edition SP2

    Retina Version 5.10.17.2128

    Please see http://support.microsoft.com/kb/952069/  states wmvcore is 10.0.0.4001 for Windows 2003 SP 2

    My version of wmvcore.dll is version 10.0.0.4005

    Also http://support.microsoft.com/kb/968816

    Ahhh.... this may be the cause....  (see below)

    September patch MS09-047 has a new version of wmvcore.dll

    For Windows Media Format Runtime 9.5 on Windows Server 2003 x86 Edition Service Pack 2

    Wmvcore.dll 10.0.0.4005 2,330,624 10-Jun-2009 20:40 x86 SP2 SP2GDR

    Wmvcore.dll 10.0.0.4005 2,330,624 11-Jun-2009 04:59 x86 SP2 SP2QFE

    I am running version 10.0.0.4005 thus furthering my thought that Audit ID 7462 is a false positive.

    Please confirm. 

    Thanks,

    Jim
Page 1 of 1 (10 items)
© 1995 - 2009 eEye Incorporated