Recordists who use XP:
Yes, believe it or not, no hoax, under the worst conditions (a hacker
creates a malicious MP3 file which you DL from a web site) by merely
hovering your cursor over an MP3 file it could destroy your system files or=
reformat your hard disc. Don't take my word for it:
http://www.wired.com/news/technology/0,1282,56924,00.html?tw=3Dwn_ascii
Nullsoft's WinAmp if you use it also has a similar problem.
Remember all those RIFF meta data we discuss every few months? Well if
you put too long an entry into an MP3 "Artist" category, XP has "an
unchecked buffer" that overflows into forbidden memory, allowing code to be=
inserted that runs when that buffer tries to read the Orginal artist. This=
happens in Windows Explorer when you roll over the file name. Great,
huh? There is a fix, see.
http://www.microsoft.com/technet/treeview/default.asp?url=3D/technet/securi=
ty/bulletin/MS02-072.asp
where they also thank the firm that found this all out. Microsoft calls
this a "critical" security breach.
my best regards,
Marty Michener
MIST Software Associates PO Box 269, Hollis, NH 03049 =
com
EnjoyBirds.com - Software that migrates with you. http://www.EnjoyBirds=
.com
"And some rin up hill and down dale, knapping the chucky stanes to pieces
with hammers, like sae many road makers run daft. They say it is to see how=
the world was made." -- Sir Walter Scott, St.Ronan's Well, 1824
________________________________________________________________________
________________________________________________________________________
|