Tue, Feb 24 2009 13:33
Microsoft Security Advisory (967940)
Update for Windows Autorun
Filed under: Advisories / Bulletins
Published: February 24, 2009
Microsoft is announcing the availability of an update that corrects a
functionality feature that can help customers in keeping their systems
protected. The update corrects an issue that prevents the
NoDriveTypeAutoRun registry key from functioning as expected.
When functioning as expected, the NoDriveTypeAutoRun registry key can
be used to selectively disable Autorun functionality (e.g. AutoPlay,
double click, and contextual menu features associated with Autorun) for
drives on a user's system and network. Disabling Autorun functionality
can help protect customers from attack vectors that involve the
execution of arbitrary code by Autorun when inserting a CD-ROM device,
USB device, network shares, or other media containing a file system
with an Autorun.inf file.
We encourage Windows customers to review and install this update. This
update is available through automatic updating and from the download
center. For more information about this issue, including download links
for this non-security update, see Microsoft Knowledge
Base Article 967715.