Re: Windows Media Player executes WMF content in .MP3 files.
From: Joe (1@2.com)Date: 02/25/02
- Next message: Walter Roberson: "Re: computer misuse"
- Previous message: Joe: "Re: Windows Media Player executes WMF content in .MP3 files."
- In reply to: Dave Korn: "Windows Media Player executes WMF content in .MP3 files."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Joe" <1@2.com> Date: Mon, 25 Feb 2002 14:24:45 -0500
>> So I think we have our answer. It's a .wmf file with a fake extension,
and stupid old windoze goes and opens it as the type detected from the
contents rather than the type detected from the extension. This is the same
kind of vulnerability that lets a webserver send an .exe to your browser
with a .wav file-extension in the mime headers and have it auto-run, and
represents a new potential for social-engineering of windoze users.<<
Just stop using Windows Media Player for crying out loud. WHen are people
going to learn that this application is nothing but trouble and has nothing
positive to offer?
- Next message: Walter Roberson: "Re: computer misuse"
- Previous message: Joe: "Re: Windows Media Player executes WMF content in .MP3 files."
- In reply to: Dave Korn: "Windows Media Player executes WMF content in .MP3 files."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
