It’s Patch Tuesday, and Ryan Naraine at eWeek has the same question I do. Where’s the patch?
It’s been almost three months since Microsoft promised a Windows Media Player update to help thwart the threat of spyware infection but, to date, users of the WMP 9 Series remain at risk.
When the issue first surfaced in January, Microsoft officials made it clear that the spyware infection attack scenario did not exploit a vulnerability in the software.
The company later issued an update, but only for the newer WMP 10 software, which is only available on the Windows XP operating system.
When researchers pointed out that WMP 9 users remained vulnerable, Microsoft program manager Marcus Matthias said a fix would be made available at a later date. The issue remains unresolved.
Despite that missing piece, there are a host of Critical Updates out today. Make sure you have Automatic Updates turned on, or visit Windows Update.
Ed Bott 
And while they are at it, how about letting users allocate more memory to WMP so that the painfully slow response times with large digital libraries can go away.