Two vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system.

1) An error exists in Windows Media Runtime when handling the sample rate for a Windows Media Voice frame, which can be exploited to corrupt memory and execute arbitrary code e.g. when a user opens a specially crafted audio file.

2) A vulnerability is caused due to Microsoft Windows Media Runtime not properly initialising certain functions when processing compressed audio files. This can be exploited to corrupt memory when a user opens a specially crafted media file or receives specially crafted streaming content from a web site.

Successful exploitation allows execution of arbitrary code.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Ivan Fratric of the Zero Day Initiative. The vendor also credits Jun Xie of McAfee Avert Labs.
2) The vendor credits Vinay Anantharaman of Adobe Systems, Inc.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS09-051 (KB975682, KB969878, KB954155, KB975025):
http://www.microsoft.com/technet/security/bulletin/MS09-051.mspx

Zero Day Initiative:
http://www.zerodayinitiative.com/advisories/ZDI-09-069/

Deep Links
Links available to Secunia VIM customers