PDA

View Full Version : WMP9/10 vulnerability


Sharktooth
11th December 2006, 18:11
A critical bug in WMP9 and 10 has been discovered and there already is a proof of concept code that can exploit it.
Is MS going to patch this soon, should we stay away from .asx or even install WMP11 (with all the limitations it comes with) to stay secure?

More info on the subject: http://www.techweb.com/showArticle.jhtml?articleID=196602748&cid=RSSfeed_TechWeb

dumbuser
13th December 2006, 08:36
Sounds to me more like anything that supports an asx playlist could be at risk so WMP 11 may not be the cure even though we could be lead to believe it. It could even be playlists in general that are presently supported in your browser as there is not enough info from the provided link.

squid_80
13th December 2006, 15:48
The patch is out already. You just need to download (http://www.microsoft.com/downloads/details.aspx?familyid=19ca4b44-2b60-4270-9c42-f5063c627f91&displaylang=en) it.

Sharktooth
14th December 2006, 04:59
tnx squid. i got it today thru windows update.

4Dude
29th December 2006, 23:27
I just tried this test file (http://www.securityfocus.com/data/vulnerabilities/exploits/21247.asx) (Proof of Concept) and my player said it couldnt play it. (WMP9)