Posted 12/31/08 at 07:24:45 AM by Pulkit Chandna
Microsoft has gone on record to rebuff an alleged vulnerability in Windows Media Player that could facilitate remote code execution. The company said that it found all such reports regarding a WMP vulnerability to be false.
The reports of the vulnerability first surfaced after researcher Laurent Gaffie detailed the alleged threat and furnished the proof-of-concept code to make his case. Gaffie’s decision to go public with his findings without informing Microsoft hasn’t gone down well with the company.
After investigating the claims Microsoft acknowledged, in a blog post, that the proof-of-concept code does force WMP to crash but it can not be used for remote code execution.
Links:
[1] http://www.maximumpc.com/user/opulent_rigs_0
[2] http://news.cnet.com/8301-1009_3-10129682-83.html
[3] http://www.maximumpc.com/article/microsoft_stops_uri_threats_to_windows_xp_protect_yourself_today
[4] http://www.maximumpc.com/article/news/symantec_ms_access_activex_threat_dons_more_sinister_proportions
[5] http://www.maximumpc.com/article/news/new_clickjacking_threat_could_compromise_your_webcam_interrupt_striptease
Comments
Print
Email
