Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. MS10-062: Vulnerability in MPEG-4 Codec could allow remote code execution

MS10-062: Vulnerability in MPEG-4 Codec could allow remote code execution

View products that this article applies to.

Support for Windows Vista Service Pack 1 (SP1) ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 (SP2). For more information, refer to this Microsoft web page: Support is ending for some versions of Windows.

↑ Back to the top

INTRODUCTION

Microsoft has released security bulletin MS10-062. To view the complete security bulletin, visit one of the following Microsoft websites:

How to obtain help and support for this security update


Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

↑ Back to the top

FILE INFORMATION

  After you install this security update, you may find that not althe binaries that are listed in these file attributes tables appear on your computer. This depends on the on the codecs that are installed on your computer. The following table lists all the binaries that are serviced. The ship vehicle refers to the method in which the binaries were originally released. Only the binaries marked as "In-band" are present by default on your computer. By default, all of the binaries are present on systems that are running Windows Vista. 
perating system Service pack BinaryPatched binary versionShip vehicle 
Windows XP SP3mpg4ds32.ax8.0.0.4504In-band
Windows XP SP3mp4sds32.ax8.0.0.406Codec Pack 6.4, Codec Pack 8, Codec Server
Windows XP SP3mp4sdmod.dll9.0.0.4509In-band
Windows XP SP3mp4sdmod.dll10.0.0.3706Codec Server
Windows XP SP3mp4sdecd.dll 11.0.5721.5274Windows Media Player 11, FSDK 11
Windows XP Professional x64 EditionSP2mp4sds32.ax8.0.0.406Codec Pack 6.4, Codec Pack 8, Codec Server
Windows Server 2003 x64 EditionSP2mpg4ds32.ax8.0.0.4504In-band
Windows Server 2003 x64 EditionSP2mp4sdmod.dll10.0.0.3706In-band
Windows Server 2003 x64 EditionSP2mp4sdecd.dll 11.0.5721.5274Windows Media Player 11, Windows Media Format 11
Windows Server 2003 - 32-bit x86SP2mp4sds32.ax8.0.0.406Codec Pack 6.4, Codec Pack 8, Codec Server
Windows Server 2003 - 32-bit x86SP2mpg4ds32.ax8.0.0.4504In-band
Windows Server 2003 - 32-bit x86SP2mp4sdmod.dll10.0.0.4007In-band
Notes
  • When Windows Media Player does not have the required codec for a specific media file, Windows Media Player will automatically try to obtain the codec from the Microsoft codec server.
  • Codec Installation Package for Windows Media Player 6.4 is available on the Microsoft Download Center. For more information, visit the following Microsoft webpage:  
    http://windows.microsoft.com/en-us/windows7/Codecs-frequently-asked-questions
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows XP and Windows Server 2003 file information

  • The files that apply to a specific milestone (RTM, SPn) and service branch (QFE, GDR) are noted in the "SP requirement" and "Service branch" columns.
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. QFE service branches contain hotfixes in addition to widely released fixes.
  • In addition to the files that are listed in these tables, this software update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.

For all supported x86-based versions of Windows XP

File nameFile versionFile sizeDateTimePlatform
Mp4sds32.ax8.0.0.406241,66405-Apr-201020:31Not Applicable
Mp4sdmod.dll10.0.0.3706387,94401-Apr-201011:45x86
Mp4sdecd.dll11.0.5721.5274317,44030-Mar-201019:24x86
Mpg4ds32.ax8.0.0.4504262,41630-Mar-201007:52Not Applicable
Mp4sdmod.dll9.0.0.4509384,51205-Apr-201018:54x86

For all supported x64-based versions of Windows Server 2003 and of Windows XP Professional x64 edition

File nameFile versionFile sizeDateTimePlatform
Mp4sds32.ax8.0.0.406241,66405-Apr-201020:31Not Applicable
Mp4sdmod.dll10.0.0.4007385,53601-Apr-201023:04x86
Mp4sdecd.dll11.0.5721.5274317,44030-Mar-201019:24x86
Mpg4ds32.ax8.0.0.4504262,41630-Mar-201007:52Not Applicable

For all supported x86-based versions of Windows Server 2003

File nameFile versionFile sizeDateTimePlatform
Mp4sds32.ax8.0.0.406241,66405-Apr-201020:31Not Applicable
Mp4sdmod.dll10.0.0.4007385,53601-Apr-201023:04x86
Mpg4ds32.ax8.0.0.4504262,41630-Mar-201007:52Not Applicable

Windows Vista and Windows Server 2008 file information

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.0.6000.16xxxWindows VistaRTMGDR
    6.0.6000.20xxxWindows VistaRTMLDR
    6.0.6001.18xxxWindows Vista SP1 and Windows Server 2008 SP1SP1GDR
    6.0.6001.22xxxWindows Vista SP1 and Windows Server 2008 SP1SP1LDR
    6.0.6002.18xxxWindows Vista SP2 and Windows Server 2008 SP2SP2GDR
    6.0.6002.22xxxWindows Vista SP2 and Windows Server 2008 SP2SP2LDR
  • Service Pack 1 is integrated into the release version of Windows Server 2008. Therefore, RTM milestone files apply only to Windows Vista. RTM milestone files have a 6.0.0000.xxxxxx version number.
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows Vista and Windows Server 2008

File nameFile versionFile sizeDateTimePlatform
Mp4sdecd.dll11.0.6001.7009317,95205-Apr-201016:08x86
Mp4sdecd.dll11.0.6001.7117317,95205-Apr-201016:30x86
Mp4sdecd.dll11.0.6002.18236317,95205-Apr-201017:02x86
Mp4sdecd.dll11.0.6002.22377317,95205-Apr-201017:16x86

For all supported x64-based versions of Windows Vista and Windows Server 2008

File nameFile versionFile sizeDateTimePlatform
Mp4sdecd.dll11.0.6001.7009295,42405-Apr-201016:53x64
Mp4sdecd.dll11.0.6001.7117295,42405-Apr-201016:40x64
Mp4sdecd.dll11.0.6002.18236295,42405-Apr-201017:33x64
Mp4sdecd.dll11.0.6002.22377295,42405-Apr-201017:13x64
Mp4sdecd.dll11.0.6001.7009317,95205-Apr-201016:08x86
Mp4sdecd.dll11.0.6001.7117317,95205-Apr-201016:30x86
Mp4sdecd.dll11.0.6002.18236317,95205-Apr-201017:02x86
Mp4sdecd.dll11.0.6002.22377317,95205-Apr-201017:16x86

Additional file information for Windows Vista and Windows Server 2008

Additional files for all supported x86-based versions of Windows Vista and Windows Server 2008

File namePackage_1_for_kb975558_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,886
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_1_for_kb975558~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size2,592
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_2_for_kb975558_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,728
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_2_for_kb975558~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size2,430
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_3_for_kb975558_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,886
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_3_for_kb975558~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size2,596
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_4_for_kb975558_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,728
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_4_for_kb975558~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size2,436
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_client_1_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,357
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_client_1~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,376
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_client_2_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,354
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_client_2~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,373
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_client_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,690
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_client~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,722
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_server_0_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,395
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_server_0~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,414
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_server_1_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,354
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_server_1~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,374
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_server_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,691
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_server~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,722
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File nameUpdate-bf.mum
File versionNot Applicable
File size2,014
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File nameX86_595647ac335a19d8ecb941a678ec2294_31bf3856ad364e35_6.0.6002.22377_none_cd03cdc2a6ce4a55.manifest
File versionNot Applicable
File size696
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File nameX86_8cdb087eb96ff1c0a1f14670f7ef8d42_31bf3856ad364e35_6.0.6001.18454_none_e6e16390602c4a96.manifest
File versionNot Applicable
File size696
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File nameX86_e51dae5a6928c3e0a48c2c19aa5f8399_31bf3856ad364e35_6.0.6001.22665_none_fc28dbf1cd8cde9d.manifest
File versionNot Applicable
File size696
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File nameX86_fa2fe5b1996bc415f53ac75029fa9777_31bf3856ad364e35_6.0.6002.18236_none_de26fda346ca998e.manifest
File versionNot Applicable
File size696
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File nameX86_microsoft-windows-mp4sdecd_31bf3856ad364e35_6.0.6001.18454_none_0eb661b86d4e1763.manifest
File versionNot Applicable
File size13,696
Date (UTC)05-Apr-2010
Time (UTC)17:51
PlatformNot Applicable
File nameX86_microsoft-windows-mp4sdecd_31bf3856ad364e35_6.0.6001.22665_none_0f3630c78672e99c.manifest
File versionNot Applicable
File size13,696
Date (UTC)05-Apr-2010
Time (UTC)18:09
PlatformNot Applicable
File nameX86_microsoft-windows-mp4sdecd_31bf3856ad364e35_6.0.6002.18236_none_10b475f26a62647a.manifest
File versionNot Applicable
File size13,696
Date (UTC)05-Apr-2010
Time (UTC)18:26
PlatformNot Applicable
File nameX86_microsoft-windows-mp4sdecd_31bf3856ad364e35_6.0.6002.22377_none_1113d357839f8d5f.manifest
File versionNot Applicable
File size13,696
Date (UTC)05-Apr-2010
Time (UTC)20:47
PlatformNot Applicable

Additional files for all supported x64-based versions of Windows Vista and Windows Server 2008

File nameAmd64_0cbc0f6237929dd7f8c18b5a879971d5_31bf3856ad364e35_6.0.6001.22665_none_016036dbaf52ca70.manifest
File versionNot Applicable
File size1,040
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File nameAmd64_926b5f1af4df231d63f7716498317855_31bf3856ad364e35_6.0.6001.18454_none_3f293f7cd990fb44.manifest
File versionNot Applicable
File size1,040
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File nameAmd64_e643e05d7bf6673f8ee97bc6187fef84_31bf3856ad364e35_6.0.6002.18236_none_0c340e70b65f3844.manifest
File versionNot Applicable
File size1,040
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File nameAmd64_e9050ceb144b580db7a2aa61d62399df_31bf3856ad364e35_6.0.6002.22377_none_366e46bf30b1d983.manifest
File versionNot Applicable
File size1,040
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File nameAmd64_microsoft-windows-mp4sdecd_31bf3856ad364e35_6.0.6001.18454_none_6ad4fd3c25ab8899.manifest
File versionNot Applicable
File size13,720
Date (UTC)05-Apr-2010
Time (UTC)18:32
PlatformNot Applicable
File nameAmd64_microsoft-windows-mp4sdecd_31bf3856ad364e35_6.0.6001.22665_none_6b54cc4b3ed05ad2.manifest
File versionNot Applicable
File size13,720
Date (UTC)05-Apr-2010
Time (UTC)18:17
PlatformNot Applicable
File nameAmd64_microsoft-windows-mp4sdecd_31bf3856ad364e35_6.0.6002.18236_none_6cd3117622bfd5b0.manifest
File versionNot Applicable
File size13,720
Date (UTC)05-Apr-2010
Time (UTC)19:13
PlatformNot Applicable
File nameAmd64_microsoft-windows-mp4sdecd_31bf3856ad364e35_6.0.6002.22377_none_6d326edb3bfcfe95.manifest
File versionNot Applicable
File size13,720
Date (UTC)06-Apr-2010
Time (UTC)09:35
PlatformNot Applicable
File namePackage_1_for_kb975558_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size2,106
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_1_for_kb975558~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size3,036
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_2_for_kb975558_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,946
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_2_for_kb975558~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size2,872
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_3_for_kb975558_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size2,106
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_3_for_kb975558~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size3,040
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_4_for_kb975558_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,946
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_4_for_kb975558~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size2,878
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_client_1_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,365
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_client_1~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,384
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_client_2_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,362
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_client_2~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,381
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_client_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,700
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_client~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,732
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_server_0_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,403
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_server_0~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,422
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_server_1_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,362
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_server_1~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,382
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_server_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,701
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File namePackage_for_kb975558_server~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,732
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File nameUpdate-bf.mum
File versionNot Applicable
File size2,028
Date (UTC)06-Apr-2010
Time (UTC)13:06
PlatformNot Applicable
File nameX86_microsoft-windows-mp4sdecd_31bf3856ad364e35_6.0.6001.18454_none_0eb661b86d4e1763.manifest
File versionNot Applicable
File size13,696
Date (UTC)05-Apr-2010
Time (UTC)17:51
PlatformNot Applicable
File nameX86_microsoft-windows-mp4sdecd_31bf3856ad364e35_6.0.6001.22665_none_0f3630c78672e99c.manifest
File versionNot Applicable
File size13,696
Date (UTC)05-Apr-2010
Time (UTC)18:09
PlatformNot Applicable
File nameX86_microsoft-windows-mp4sdecd_31bf3856ad364e35_6.0.6002.18236_none_10b475f26a62647a.manifest
File versionNot Applicable
File size13,696
Date (UTC)05-Apr-2010
Time (UTC)18:26
PlatformNot Applicable
File nameX86_microsoft-windows-mp4sdecd_31bf3856ad364e35_6.0.6002.22377_none_1113d357839f8d5f.manifest
File versionNot Applicable
File size13,696
Date (UTC)05-Apr-2010
Time (UTC)20:47
PlatformNot Applicable

↑ Back to the top

Keywords: kb, atdownload, kbbug, kbexpertiseinter, kbfix, kblangall, kbmustloc, kbsecbulletin, kbsecreview, kbsecurity, kbsecvulnerability, kbsurveynew

↑ Back to the top

Article Info
Article ID : 975558
Revision : 1
Created on : 1/7/2017
Published on : 5/8/2012
Exists online : False
Views : 374