chsbiking points to an article over at the News.com website. Yesterday a security firm warned that people using Windows XP or WinAmp could fall prey to a vulnerability, enabling a modified music file to take control of a computer:
Flaws in both pieces of software could introduce malicious MP3 or Windows Media files--which sound identical to unmodified music--into the file-swapping systems, said George Kurtz, CEO of Foundstone. |
The flaw in Windows XP can force the operating system to run code when a music file is played by Windows Explorer, the operating system's file-browsing application. Even placing the mouse pointer over a file icon--opening a preview of the file--could trigger the file's payload, if it has one. The vulnerability does not affect the Windows Media Player, according to details posted by Microsoft in its advisory.
According to the article the music industry are already eyeing such tactics as a way to stop file swappers from trading copyrighted music in the future. A patch for Windows XP is available through Microsoft's Windows Update service. The newest version of NullSoft's WinAmp is available here.
Source: News.com
