TechSpot

Flaw in Windows Media Player Skins

By TS | Thomas
May 8, 2003
Topic Status:
Not open for further replies.
  1. A flaw exists in the way Windows Media Player 7.1 & Windows Media Player for Windows XP handle the download of skin files. The flaw means that an attacker could force a file masquerading as a skin file into a known location on a user’s machine. This could allow an attacker to place a malicious executable on the system.

    In order to exploit this flaw, an attacker would have to host a malicious web site that contained a web page designed to exploit this particular vulnerability & then persuade a user to visit that site – an attacker would have no way to force a user to the site. An attacker could also embed the link in an HTML e-mail & send it to the user.

    Affected Software:
    Microsoft Windows Media Player 7.1
    Microsoft Windows Media Player for Windows XP (Version 8.0)

    Patch availability:
    Microsoft Windows Media Player 7.1
    Microsoft Windows Media Player for Windows XP (Version 8.0)
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.