Microsoft has issued an update for Microsoft Windows Media Player 9 to fix a vulnerability allowing malicious web sites to view and manipulate media library meta data.

The problem is that the ActiveX component fails to restrict what a web site can do with the media library, it is possible to view, delete and rename entries in the library. This does not allow web sites to delete or place files on the users system.

Solution
A patch is available:
Further details available in Customer Area

Provided and/or discovered by
Jelmer

Original Advisory
http://www.microsoft.com/technet/security/bulletin/MS03-021.asp

Deep Links
Links available in Customer Area