Windows Media Player Flaws Found

[preacher]

Big surprise, Windows Media Player has three security flaws in it. Found this story at
http://www.salon.com/tech/wire/2002/06/27/ms_security/index.html

patches for the flaws can be found at
http://www.microsoft.com/technet/security/bulletin/MS02-032.asp

[Calum]

hmmm. as far as i know, rival media player for windows "DivX Player" does not have flaws as drastic as winblows mediocre player, due to not having a heap of undocumented internet stuff designed to intrude upon your privacy. You can download it at www.divx.com

edit - it is unclear to me, does this only affect windows XP? or will it affect, for example winblows mediocre player 6.4 and 7.1 for windows 98 as well?

[ June 28, 2002: Message edited by: Calum ]

[Kintaro]

Bugfixes:
www.winamp.com
www.xmms.org

[Kintaro]

Theres no news... like bad news
"My girlfriends shes so fine my girlfriend runs the fastest mile, my girlfriend is my biggest fan, MY GIRLFRIEND IS A MAN"
 -FRENZAL RHOMB

[ June 28, 2002: Message edited by: BOB X11 ]

[choasforages]

ummmm, winamp and xmms

try and get this to compile right in redhat

www.mplayerhq.hu

[voidmain]

I had no problem doing so (other than it being a lot of work because you have to follow the directions and compile the prereq stuff).  I'll admit it was a pain, but not impossible.

[choasforages]

errr, i should have said redhat 7.3, they axed the gcc 3 packages. i had to run around the internet looking for cool things to use with it. every watched a music video in ascii art. try that with windows.

[rtgwbmsr]

Doesn't anyone at micro$lut notice that when there is security flaws in something that is just supposed to play music (and videos) that something is very, very wrong. Seriously, since they have so many bugs, why don't they put the things in patch packs instead of having to download each individually? No that would be too smart...

Mandrake + Red Hat - Perfect together

[KernelPanic]

They have multiple patches so that when windoze users have to install them they get into the rythmn of clicking 'yes' to the EULA's and then on the last one, Microsoft includes Clause 5.67.a. which states:

'We own you, your car, your soul, oh and Bill likes your little sister so we'll have her too and yeah your wife would be nice, and er we quite like the look of your Hi-fi'

That's why...

[Calum]

ho hum, i'd prefer to see what i'm getting if i was ever going to download a patch. If i know i'm patching one thing, i'd like to not have to also download megabytes of fixes and gods know what else for things i have never had any problems with, much less used.

On my WinME side, i have downloaded only one update package ever. It is just over a year newer than my actual windows CD, and quite frankly, i will never be installing a windows upgrade again. It's things like these that tip windows' dubious stability right over the edge. I always know it's time to reinstall windows when more than 50% of my CDs corrupt when writing, and that seemed to be the main feature of this "upate". Christ knows what it was supposed to fix...

[Master of Reality]

quote:Originally posted by ThePreacher:
Big surprise, Windows Media Player has three security flaws in it. Found this story at
http://www.salon.com/tech/wire/2002/06/27/ms_security/index.html

patches for the flaws can be found at
http://www.microsoft.com/technet/security/bulletin/MS02-032.asp

whoa... so your saying that microsoft products actually have flaws???? But i thought that they were perfect?????

[jtpenrod]

quote:The flaws were found in Windows Media Player versions 6.4, 7.1 and in its newest Windows XP operating system. The most serious flaw can allow an attacker access to the user's system with the ability to add, change or delete data and perform other functions.

Now hold on there. Allow an attacker to access the user's system to change, add, or delete data? I thought that that was precisely what the latest service pack was suppose to do according to the amended EULA.  :eek:  

Or does it only count when someone other than Microsoft does it?    
_______________________________________

Live Free or Die: Linux

If software can be free, why can't dolphins?

[choasmaster]

haha, that would be correct

[tratan]

This EULA stuff is very scary, especially combined with the crazy congressman.  I suppose there's not much chance of us being absolutely forced to use Windows by our CPUs, but I'm still a little worried.  Even if hackers (not crackers, because these would be good guys) manage to crack the chips, I think it could be arranged so that routers would check machines for valid Windows licenses, through PGP or somesuch.    

Oh well, I'm probably just being paranoid, I should just enjoy using Linux while I can!