Watch those MP3's

http://online.securityfocus.com/news/338


"A quirk in media players from Microsoft and RealNetworks could enable attackers to hijack Web browsers and run scripts on the computers of some MP3 music fans.

The trick has apparently been discovered by pornography sites and spammers, which have been seeding some music file trading services with bogus MP3 music files.

One such MP3 file, ostensibly containing the music of the Los Angeles-based rock group Lifehouse, launched a pornographic video and generated a "massive" amount of pop-up ads when played back on the Windows Media Player from Microsoft, according to one newsgroup report. "


i'd say the big concern here is that an unpatched browser could be redirected to a malicious website with active x or javascript...

Thank you Zigar..I really don't like RealPlayer or Media Player for playing MP3's, and now I have yet one more reason to add to the ever growing list.
Depending on what my clients want I either steer them to Winamp or MusicMatch JB.

Thanks for the heads up!

TC

Im so sick and tired of this kinda crap commin from companies... Microsoft seems to mak more problems then they fix... i can put up with most thier errors cause they dont effect me.. but when it comes down to crap as basic as MP3s they still screw up... as for REAL ... spyware should be illegal in ALL casses! its just like a trojan if u ask me... u dont know that its doing other things and they dont bother to tell u in a way that u will accually know without reading print smaller then font 1 :P

whats worse... the hackers that sploit these problems... or the idiots that make the problems...


but off topic of this

SPY WARE SHOULD BE ILLEGAL!!!!!!!!!!!

_NetSyN_

I can't resist. I have been lurking - and haven't had anything useful to say so I have kept quiet. But I can no longer resist. I can honestly say this brought a smile to my face because I hate Media Player and Real Player so frakin' much. They are waaaaaaaaay too invasive.

3 cheers for WinAmp! Hooray!!!!! :D

Sorry - I'm worthless. :(

Far from worthless!!

Thanks for coming out of the shadows darlin..been wondering how long you could hold out. :D

ya...winamp is my fav...now if only they weren't owned by the OTHER evil empire...but i gotta give aol creds...they haven't ruined a good prog...(yet at least...can you say netscape 6...ugh...)

real is so full of spy ware that i won't even install it...

media player is just a typical ol bloated m$ pig of a prog...

Yeah - leave it to me. Microsoft bashing always seems to bring me out of my shell. :D

Been so busy with TTB - I haven't been able to actually add anything useful to the discussions here at AO - but I have been doing as much reading here as possible. ;)

Melmacian lives! welcome.

Wow - here we go. 3 posts on AO all in one day. All 3 worthless. :D

TYVM Gold Eagle. :D:D Happy to be here. Say...can ya lend me some of those posts? hehehe