MS08-033: Vulnerabilities in DirectX could allow remote code execution

Microsoft has released security bulletin MS08-033. The security bulletin contains all the relevant information about the security update. This information includes deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites:

• Home users:
  http://www.microsoft.com/protect/computer/updates/bulletins/200806.mspx
  Skip the details: Download the updates for your home computer or laptop from the Microsoft Update Web site now:
  http://update.microsoft.com/microsoftupdate/
• IT professionals:
  http://www.microsoft.com/technet/security/bulletin/ms08-033.mspx

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Known issues with this security update

• After you install this security update, you may find that the preview from a Web camera (Webcam) stops unexpectedly. The preview stops when the system encounters a bad MJPEG frame. A bad MJPEG frame can be caused by random electrical noise or by some other hardware event.
  
  To work around this issue, stop and then restart the preview. If the problem continues to frequently occur, try to connect the camera directly to a USB port on the computer. For example, do not connect the camera to an external USB hub. Also, verify that any cables that are connected to the computer are in good working condition. For example, inferior or damaged cables may be more susceptible to receiving electrical noise.
• After you install this update on a computer that is running Microsoft Windows 2000, you may experience one or both of the following issues:
  • You scan a system by using Microsoft Baseline Security Analyzer (MBSA) 2.1 or by using a Microsoft Windows Server Update Services (WSUS) server. When you do this, the scan report may indicate that this update was successfully installed even though the update was not installed.
  • The reports from MBSA and from WSUS may differ about the status of this security update.
  These issues occur because of a detection issue with this security update.
  
  The Microsoft catalog that is used by WSUS and by MBSA was updated to resolve this detection issue. Therefore, a current scan correctly identifies the status of this update. If a scan indicates that you have to install security update 951698, we recommend that you install the update.

File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported editions of Windows 2000 SP4

For all supported editions of Windows 2000 SP4 with DirectX8.1

For all supported editions of Windows 2000 SP4 with DirectX9.0

For all supported Itanium-based editions of Windows Server 2008

For all supported x64-based editions of Windows Vista or Windows Server 2008

For all supported 32-bit editions of Windows Vista or Windows Server 2008

For all supported x64-based editions of Windows Server 2003 or Windows XP Professional

For all supported Itanium-based editions of Windows Server 2003

For all supported 32-bit editions of Windows Server 2003

For all supported 32-bit editions of Windows XP