ITinfo: Microsoft Patches Media Player Security Holes

Site Directory
Membership
Train-the-Trainer
Trainer Certification
Certified Training Materials
ITinfo E-zine
Responsible Training
White Papers
Trainer Resources
What's New
Speaking Engagements
Onsite Training
ITrain Gear

Media Player Security

Popular music application requires security patching

ITinfo Sponsor

ERROR: Random File Unopenable

The random file, as specified in the $random_file perl variable was unopenable.

The file was not found on your file system. This means that it has either not been created or the path you have specified in $trrandom_file is incorrect.

Microsoft Patches Media Player Security Holes

by Dave Murphy
ISSN 1535-3613

Microsoft has released a patch to plug security holes in its Windows Media Player software that could allow an attacker to run malicious code and access computer files on a users' PC. The patches repair two flaws that affect Media Player versions 6.4 and 7.

Media Player is a popular application for displaying audio and video files downloaded from corporate intranets and the Internet.

The first flaw affects streaming media playlists. A buffer overrun problem allows files to be streamed unchecked, and malicious code can be executed on the PC.

The second flaw causes Internet shortcuts to be saved to the PC's temporary files folder. The stored files can contain HTML code that executes unwanted Internet access commands.

Media Player 6.4 can be patched. Media Play 7 should be upgraded to version 7.1.

Call for Comments

What do you think? Leave your comments on the message center.

References

MS Media Player
Message Center

Previous issues are on our website at http://itrain.org/itinfo/.

International Association of Information Technology Trainers
PMB 616
6030-M Marshalee Dr
Elkridge, MD 21075-5987

410.567.5366
1.888.290.6200
fax: 801.650.0423
Membership Director: member@itrain.org

Return to ITrain Homepage

http://itrain.org/itinfo/2001/it010525.html
updated May 25, 2001