christ
Guest
|
 Posted:
Wed Dec 22, 2004 5:32 pm Post subject:
Vulnerability in Win Media Player 9 down |
|
|
Um, okay. Is Microsoft doing something for the rest of us without XP.
- Vulnerabilities in Windows Media Player -
Oxygen3 24h-365d, by Panda Software (http://www.pandasoftware.com)
Madrid, December 21 2004 - According to SecurityTracker, two vulnerabilities
have been detected in Microsoft Windows Media Player. One of these could
allow an attacker to run arbitrary code.
A remote user could overwrite -on the user's system- the artist, album name,
and song name information in a media file. This would allow the remote user
to inject arbitrary scripting code in the file and then cause Internet
Explorer to parse the file, and execute the scripting code in the Local
Computer zone.
The second vulnerability detected on Microsoft Windows Media Player could
allow a remote user to call the ActiveX Windows Media Player object to
determine whether a certain file exists on the user's system.
These security problems have been resolved on the recently released version
10 of Windows Media Player.
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in
