MSN Messenger 7 Beta, exploited
Quote:
As MSN Messenger 7 goes into private beta, Neowin has learned of several exploits resulting in the "winks" feature of MSN Messenger 7. A Neowin member wishing to remain anonymous has alerted us that users can generate their own flash movies and send them across MSN Messenger. As flash movies can open other things on the system such as Internet Explorer, this could be fatal. As MSN Messenger 7 is only beta and isn't available publically this isn't a major exploit but it does show that added features to a product like this makes it less secure and more open to attack/exploit.
MSN Messenger 7 is beta and is available in copies floating around the internet. We strongly advise members not to use the current beta until this flaw has been resolved. MSN Messenger 7 effectively opens your system up to allow a hacker to run numerous tasks on your machine.
Source : http://www.neowin.net/
The Beta was release YESTERDAY and it's allready exploited! How pathetic!
Microsoft delays IM beta over security concerns
Microsoft delays IM beta over security concerns
Quote:
Microsoft confirmed on Thursday that it has suspended the beta release of MSN Messenger 7.0 because of a potential security hole affecting one of the program's features.
The security concern stems from a feature called "winks," essentially Flash-based animated buddy icons with sound effects that users can send to one another. Apparently hackers can exploit the hole to send their own unauthorized winks to people, causing a "security problem" for the recipient, a Microsoft representative said.
Because of this discovery, Microsoft will pull the winks feature when it releases the MSN Messenger 7.0 beta next week. The software giant had planned to release the beta this week.
The winks feature was developed by Microsoft's IM development team Threedegrees. The group, largely consisting of recent college graduates, was formed in 2001 as part of Microsoft's efforts to develop services targeting 18- to 24-year-olds, or what the company calls the "Net generation." IM is central to these efforts, since the software has become a popular way for young Net users to socialize and interact.
Threedegrees services have made their way onto the current version of MSN Messenger, but their presence has been under the radar. MSN Messenger users can find links to download Threedegrees services, along with features that let groups of people share digital files such as music and photos.
In fact, Microsoft hopes to make Threedegrees' collaboration services useful as a way to share song playlists, while integrating features from its MSN Music store.
A version of MSN Messenger 7.0 beta leaked onto the Web last week, revealing other features, such as personalization tools and areas dedicated to MSN Search.
Source : http://news.zdnet.com/2100-9588_22-5401516.html
That a nice move by Microsoft!