Microsoft KB Archive/184346

= Description of security patches for NetMeeting =

Article ID: 184346

Article Last Modified on 2/26/2007

-

APPLIES TO


 * Microsoft NetMeeting 2.1 Standard Edition
 * Microsoft NetMeeting 2.0 Standard Edition
 * Microsoft NetMeeting 2.1 Standard Edition
 * Microsoft NetMeeting 2.0 Standard Edition
 * Microsoft NetMeeting 1.0 Standard Edition

-



This article was previously published under Q184346



SUMMARY
This article describes the following security issue in NetMeeting, and the patch that addresses the issue:


 * "Speed Dial" issue



"Speed Dial" issue
Microsoft has posted a fix to protect NetMeeting customers against a potential problem known as the "Speed Dial" issue. This issue can cause NetMeeting to stop responding (hang) if a malicious Web page author links to a specially-edited NetMeeting speed dial entry. Once NetMeeting stops responding, a knowledgeable developer could run arbitrary code in the computer's memory. This issue affects the following versions of NetMeeting:


 * NetMeeting versions 1.0, 2.0, 2.1 for Windows 95
 * NetMeeting versions 2.0, 2.1 for Windows NT 4.0 on the following platforms: x86, Alpha

There have been no reports of customers being affected by this bug.

For additional information (or to download the patch), please see the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=26c9da7c-f778-4422-a6f4-efb8abba021e&DisplayLang=en

The following versions of this patch are available on Microsoft's Web site:

Note These tables list only the U.S. versions of the patch. Updates for other language versions will be available at a later date.

Windows 95:   Patch name     NetMeeting version   File updated   Updated file version ---

Nmsecp10.exe  NetMeeting 1.0       Conflnk.dll    4.00.1134 Nmsecp20.exe  NetMeeting 2.0       Msconf.dll     4.00.1373 Nmsecp21.exe  NetMeeting 2.1       Msconf.dll     4.3.2205 Windows NT 4.0 (x86):   Patch name     NetMeeting version   File updated   Updated file version ---

Nmsecp21.exe  NetMeeting 2.1       Msconf.dll     4.3.2205 Windows NT 4.0 (Alpha):   Patch name     NetMeeting version -

Nmsecp20.exe  NetMeeting 2.0 Nmsecp21.exe  NetMeeting 2.1 Note This patch is included in the latest version of NetMeeting 2.1 for Windows 95 and Windows NT 4.0. If NetMeeting is not currently installed on your computer, you can download the latest version of NetMeeting 2.1 from the following Microsoft Web site:

http://www.microsoft.com/windows/ie/downloads/default.mspx

Note The Microsoft Windows 98 Windows Update site has the latest NetMeeting build 2203, which includes the security fix. The security fix can be identified by the file Msconf.dll, version 4.3.2205. Currently, when you access the Windows Update site, NetMeeting is not listed if NetMeeting is already installed on your computer.

Additional query words: update fix 1.00 2.00 2.10

Keywords: kbinfo KB184346

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.