Welcome Guest ( Log In | Register )

  Recent Tech News
US group gives Telstra 'red card'
New worm, Santy, using Google to sp...
New IE hole could perfect phishing ...
Popular BitTorrent file-sharing sit...
Google Fixes Desktop Search Flaw
  Recent Gaming News
Electronic Arts to buy into Ubi Sof...
Halo 2, San Andreas key drivers of ...
Sony Says All Systems Go for PSP La...
Nvidia to work on PlayStation 3 chi...
New Command & Conquer Game Unveiled
  Recent Reviews
 · CoolerMaster Aerogate 3 A...
 · CoolerMaster AquaGate Wat...
 · OCZ Copper BGA Ramsinks
 · Mapower Warps Portable 3....
 · Vantec - PCI & RAM Slot P...
  Recent Forum Posts
Windows XP Sp2 Problems
Leadtek A350XT TDH and overclo...
FX5900U vs 9800Pro
Google Gmail Invites
Doom 3 SDK Released
  Announcement
Welcome to the new AusPCWorld



> AusPCWorld > Tech News > WinAmp flaw could compromise enterprise security






   
WinAmp flaw could compromise enterprise security
Posted by mitchy_g on 26 Nov 2004 - 12:37 0 comments
Previous Post | Tech News | Next Post
 
Internet users are at risk from a previously undiscovered flaw in the popular WinAmp media player, which attackers are actively using to spread malicious code on Windows desktops, according to security researchers.

A problem in the way WinAmp handles "skins" - used to customise the appearance of the application - means attackers can use a specially crafted skin file to execute code on any PC with WinAmp installed.

In Internet Explorer, users merely need to visit a malicious website for the code to be automatically downloaded and executed, according to advice from French security firm K-Otik.

While not as widely used as Windows Media Player or RealPlayer, WinAmp has an installed base of several million, including on corporate desktops, according to the company.

The vulnerability has been confirmed on a fully patched Windows system with WinAmp 5.04 using Internet Explorer 6.0 on Microsoft Windows XP SP1, said Danish security firm Secunia in its own warning.

News source: Computer Weekly



There are 0 additional comments, Post a comment | View printable post | Open/Close All Comments




Add A new comment
Sorry, you cannot comment to this news post because you do not have permission to do so.