Article ID: 184346
Article Last Modified on 2/26/2007
APPLIES TO
- Microsoft NetMeeting 2.1 Standard Edition
- Microsoft NetMeeting 2.0 Standard Edition
- Microsoft NetMeeting 2.1 Standard Edition
- Microsoft NetMeeting 2.0 Standard Edition
- Microsoft NetMeeting 1.0 Standard Edition
This article was previously published under Q184346
SUMMARY
This article describes the following security issue in NetMeeting, and the patch that addresses the issue:
- "Speed Dial" issue
MORE INFORMATION
"Speed Dial" issue
Microsoft has posted a fix to protect NetMeeting customers against a potential problem known as the "Speed Dial" issue. This issue can cause NetMeeting to stop responding (hang) if a malicious Web page author links to a specially-edited NetMeeting speed dial entry. Once NetMeeting stops responding, a knowledgeable developer could run arbitrary code in the computer's memory. This issue affects the following versions of NetMeeting:
- NetMeeting versions 1.0, 2.0, 2.1 for Windows 95
- NetMeeting versions 2.0, 2.1 for Windows NT 4.0 on the following platforms: x86, Alpha
There have been no reports of customers being affected by this bug.
For additional information (or to download the patch), please see the following Microsoft Web site:
The following versions of this patch are available on Microsoft's Web site:
Note These tables list only the U.S. versions of the patch. Updates for other language versions will be available at a later date.
Windows 95:
Patch name NetMeeting version File updated Updated file version
-----------------------------------------------------------------------
Nmsecp10.exe NetMeeting 1.0 Conflnk.dll 4.00.1134
Nmsecp20.exe NetMeeting 2.0 Msconf.dll 4.00.1373
Nmsecp21.exe NetMeeting 2.1 Msconf.dll 4.3.2205
Windows NT 4.0 (x86):
Patch name NetMeeting version File updated Updated file version
-----------------------------------------------------------------------
Nmsecp21.exe NetMeeting 2.1 Msconf.dll 4.3.2205
Windows NT 4.0 (Alpha):
Patch name NetMeeting version
---------------------------------
Nmsecp20.exe NetMeeting 2.0
Nmsecp21.exe NetMeeting 2.1
Note This patch is included in the latest version of NetMeeting 2.1 for Windows 95 and Windows NT 4.0. If NetMeeting is not currently installed on your computer, you can download the latest version of NetMeeting 2.1 from the following Microsoft Web site:
Note The Microsoft Windows 98 Windows Update site has the latest NetMeeting build 2203, which includes the security fix. The security fix can be identified by the file Msconf.dll, version 4.3.2205. Currently, when you access the Windows Update site, NetMeeting is not listed if NetMeeting is already installed on your computer.
Additional query words: update fix 1.00 2.00 2.10
Keywords: kbinfo KB184346
