Microsoft Security Advisory: Description of the AppCompat update for Indeo codec: December 08, 2009

Microsoft has released a Microsoft security advisory about this issue for IT professionals. The security advisory contains additional security-related information. To view the security advisory, visit the following Microsoft Web site:

Update information

How to obtain this update

The following files are available for download from the Microsoft Download Center:

All supported editions of Microsoft Windows 2000 Service Pack 4

Download the Windows2000-KB955759-x86-ENU.exe package now.

All supported x86-based versions of Windows XP

Download the WindowsXP-KB955759-x86-ENU.exe package now.

All supported x86-based versions of Windows Server 2003

Download the WindowsServer2003-KB955759-x86-ENU.exe package now.

All supported x64-based versions of Windows Server 2003 and of Windows XP Professional x64 Edition

Download the WindowsServer2003.WindowsXP-KB955759-x64-ENU.exe package now.

All supported IA-64-based versions of Windows Server 2003

Download the WindowsServer2003-KB955759-ia64-ENU.exe package now.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows 2000 file information

For all supported editions of Microsoft Windows 2000 Service Pack 4

Windows XP and Windows Server 2003 file information

• The files that apply to a specific service branch (QFE, GDR) are noted in the "Service branch" column.
• GDR service branches contain only those fixes that are widely released to address widespread, critical issues. QFE service branches contain hotfixes in addition to widely released fixes.
• In addition to the files that are listed in these tables, this update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.

For all supported x86-based versions of Windows XP

For all supported x86-based versions of Windows Server 2003

For all supported x64-based versions of Windows Server 2003 and of Windows XP Professional x64 Edition

For all supported IA-64-based versions of Windows Server 2003

Additional information about this security update

Re-enable the Indeo functionality after this security update is installed

Warning This workaround may make a computer or a network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

This security update disables some Indeo functionality by not letting Windows Internet Explorer or Windows Media Player use the codec. Certain users may require this functionality and can re-enable this functionality of the Indeo codec. To do this, users can revert the registry key changes that this security update makes. The registry key changes are different on the different versions of the Windows operating system.

Note Reverting the registry key changes may expose the user to security issues and weaken the security profile of the computer.

To revert the APPCOMPAT mitigation without uninstalling the security update, please see the following directions that are appropriate for your computer.

Windows 2000

Delete or rename the following registry subkeys.

Windows XP

Create the following registry subkeys.

Windows Server 2003, x86-based and x64-based versions

Create the following registry subkeys.