Michael Sutton Exploit Quotations

Even though Windows Media Player is not something generally used to render images, it has the capability of doing that. It's not difficult to create a Web page that uses Windows Media Player to display an image instead of the default application. I think it's a ripe target for exploitation if we see public exploit code for it.

Patching is very urgent. We expect public exploit code to become available, especially for the MSDTC issue.

Patching is very urgent, ... We expect public exploit code to become available, especially for the MSDTC issue.

We're not aware of any public exploit code for it at this time.

I would certainly recommend that users implement the vendor workarounds until a patch is made available. We feel that exploit code can and will be created.