Leave a Comment

Microsoft Disputes Claim of Windows Media Player Vulnerability
eWeek - RSS Feeds — ... a security researcher’s claim of a remote code execution flaw affecting Windows Media Player. Reports of the vulnerability surfaced last week on the SecurityTracker vulnerability notification service. According to the initial report, a bug inWindows Media Player could be exploited remotely via a specially-crafted SND, MIDI or WAV file to trigger an integer overflow. In that situation, the researcher alleged, a hacker could execute arbitrary code. A subsequent posting on the SANS Internet Storm Center Web site over the weekend stated a reader had tested proof-of-concept ...

Microsoft denies the severity of a Media Player exploit
Betanews — ... and confirmed that it did indeed crash WMP. But rather than take the test further, Heise then took the word of another Web site which claimed the crash was exploitable, prior to that site issuing a retraction yesterday. Heise has not corrected its version. "Security Tracker say that the vulnerability can allow code to pass through the hole," reads the Heise story. "If this is true it won't be long before real exploits appear. This was demonstrated with the recent zero day vulnerability of Internet Explorer." But the world at large was introduced by the issue yesterday when ...