MICROSOFT has released fixes for Windows 2000 Server and Windows Media Player 9 for security holes that could allow an attacker to release a malicious program onto a server running Windows Server 2000 software, or to reveal the music library data on any PC running Media Player 9.
The Windows Server 2000 flaw was caused by a memory problem known as ‘buffer overflow’, which could allow intruders to crash computers or run malicious code.
The Media Player 9 flaw affects PCs with the media player installed and constitutes a privacy threat by allowing an attacker to invoke an ActiveX control to access data contained in the media player’s library.