Secunia

Two vulnerabilities have been reported in several Microsoft Windows Media products, which can be exploited by malicious people to bypass certain security restrictions or compromise a vulnerable system.

1) An error within the Service Principal Name (SPN) implementation when handling NTLM credentials can be exploited to gain access with the privileges of a target user via replay attacks.

2) An error when handling ISATAP URLs can be exploited to disclose NTLM credentials and gain access with the privileges of a target user via replay attacks.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
MS08-076 (KB959807):
http://www.microsoft.com/technet/security/Bulletin/MS08-076.mspx

Deep Links
Links available in Customer Area