naturerecordists
[Top] [All Lists]

MP3 security problem with Windows XP

Subject: MP3 security problem with Windows XP
From: Marty Michener <>
Date: Tue, 21 Jan 2003 10:42:18 -0500
Recordists who use XP:

Yes, believe it or not, no hoax, under the worst conditions (a hacker
creates a malicious MP3 file which you DL from a web site) by merely
hovering your cursor over an MP3 file it could destroy your system files or=

reformat your hard disc.  Don't take my word for it:

http://www.wired.com/news/technology/0,1282,56924,00.html?tw=3Dwn_ascii

Nullsoft's WinAmp if you use it also has a similar problem.

Remember all those RIFF meta data we discuss every few months?   Well if
you put too long an entry into an MP3 "Artist" category, XP has "an
unchecked buffer" that overflows into forbidden memory, allowing code to be=

inserted that runs when that buffer tries to read the Orginal artist.  This=

happens in Windows Explorer when you roll over the file name.  Great,
huh?  There is a fix, see.

http://www.microsoft.com/technet/treeview/default.asp?url=3D/technet/securi=
ty/bulletin/MS02-072.asp

where they also thank the firm that found this all out.  Microsoft calls
this a "critical" security breach.


my best regards,

Marty Michener
MIST Software Associates PO Box 269, Hollis, NH 03049 =
com

EnjoyBirds.com  - Software that migrates with you.    http://www.EnjoyBirds=
.com

"And some rin up hill and down dale, knapping the chucky stanes to pieces
with hammers, like sae many road makers run daft. They say it is to see how=

the world was made."   --  Sir Walter Scott, St.Ronan's Well, 1824



________________________________________________________________________
________________________________________________________________________

<Prev in Thread] Current Thread [Next in Thread>
Admin

The University of NSW School of Computer and Engineering takes no responsibility for the contents of this archive. It is purely a compilation of material sent by many people to the naturerecordists mailing list. It has not been checked for accuracy nor its content verified in any way. If you wish to get material removed from the archive or have other queries about the archive e-mail Andrew Taylor at this address: andrewt@cse.unsw.EDU.AU