| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Microsoft Security Bulletin MS03-017: Flaw in Windows Media Player Skins Downloading could allow Code Execution (817787) | |
|
||
| Time: 18:59 EST/23:59 GMT | News Source: Microsoft TechNet Security | Posted By: Matthew Sabean | ||
|
Microsoft Windows Media Player provides functionality to change the overall appearance of the player itself through the use of "skins". Skins are custom overlays that consist of collections of one or more files of computer art, organized by an XML file. The XML file tells Windows Media Player how to use these files to display a skin as the user interface. In this manner, the user can choose from a variety of standard skins, each one providing an additional visual experience. Windows Media Player comes with several skins to choose from, but it is relatively easy to create and distribute custom skins. A flaw exists in the way Windows Media Player 7.1 and Windows Media Player for Windows XP handle the download of skin files. The flaw means that an attacker could force a file masquerading as a skin file into a known location on a user's machine. This could allow an attacker to place a malicious executable on the system. A patch is available to fix this vulnerability. Please read the
Security Bulletins at: | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 313 Last | Next |
The time now is
3:00:27 PM
ET.
Any comment problems? E-mail us |
| #1 By 1868 (141.133.155.28) at 5/7/2003 8:59:57 PM |
| This is almost as bad as the flaw in Clippy. Comeon, what happened to Trustworthy computing??? Why wasn't this found in February when there was that code review. |
| #2 By 1845 (12.209.152.69) at 5/8/2003 4:20:32 AM |
|
FUD, you want to face my wrath too?
I believe the point of parker's statement (#4) is that if we rejected any operating system, or indeed any software application, which has at least a single bug, we'd have no software at all. I'm sure you are a smart enough man to have understood that, why did you have to play dumb and respond with sarcasm? The fact of the matter is Microsoft software has bugs. The fact that any other software has bugs does not excuse Microsoft's bugs. What a wise consumer will do is compare the relative quality of software, bug fix policies, and tech support policies in conjunction with the intended usage of the software. If you plan to run a data center with terrabytes of data transfer per month and millions of users, you have different needs from the home user. Each consumer with his/her specific needs should evaluate needs vs. vendor offerings. I have made such evaluations personally and professionally. Microsoft thus far has better offerings for my needs than that of its competitors. For my needs, Microsoft's offerings far exceed Sun/IBM/HP for servers, Oracle/IBM for database, Java for dev platform, Linux for server or desktop. So far as Microsoft continues to provide for my needs, I'll continue to use them. That's not the lowest common denominator. That's an informed consumer, doing his reasearched, making a wise decision. If your needs (or anyone else's) differ from mine, that doesn't negate that Microsoft provides the best solution for me. |
|
Write Comment
Return to News |
Displaying 1 through 25 of 313 Last | Next |
The time now is
3:00:27 PM
ET.
Any comment problems? E-mail us |
