Microsoft Fixing Hole in Media Software
524615
Microsoft is battling a computer hacker who has repeatedly released a free program that strips away a software lock that protects digital movies and songs from being copied.
387199
Microsoft has issued a patch for a compatibility problem between the recent Windows XP Service Pack 2 and an advertising application run on many users&#39; machines.
734229
Microsoft has released a "critical" patch to fix a security flaw affecting how Windows, Office and developer tools software programs process images in the JPEG image format.
740269
(InfoWorld) - Users are being advised to disable a certain type of file in Microsoft's Windows Media Player software following the discovery of a new security hole in the software. The flaw, which affects Windows Media Player versions 9 and 10, could allow a malicious hacker to run unauthorized software on a victim's PC or cause a denial of service attack, according to security company FrSIRT, which rated the problem critical in an advisory Thursday. The flaw is due to a buffer overflow error that can occur when Windows Media Player is used to run ".asx" media files, according to a warning from eEye Digital Security . Such files open automatically in a Web browser, meaning a hacker would need only to post an infected .asx file in a Web page and then try to lure users to visit the page, eEye Digital said. An infected file could also be sent via email, in which case users would need to be persuaded to open it. Microsoft said an initial investigation revealed that the "proof of concept" code could allow an attacker to execute code on a user's machine. It said it was unaware of any attempts to exploit the vulnerability, and it was unclear Friday morning if the proof of concept code it referred to was in the hands of hackers. Users can protect against the vulnerability in Internet Explorer by preventing it from opening .asx files automatically. Turning off Active Scripting would also greatly reduce, but not eliminate, the risk, Microsoft said. FrSIRT also recommended that users upgrade to Windows Media Player 11 , which it said is not affected. Microsoft was still determining Friday whether it needed to issue an "out of cycle" security fix for the problem or patch it with its next monthly software update. The flaw was originally reported on Nov. 22, when it was identified only as a denial-of-service issue. Some discussion boards described the problem as a "zero-day exploit," although it was unclear if that was the case. Zero-day exploits occur when exploit code is released on the same day that a flaw is uncovered, giving users no time to protect themselves. It's been another busy week for Microsoft's security teams. On TuesdayÂ the company warnedÂ of an unpatched vulnerability in Word that had been the subject of what it called "limited attacks." And on Thursday it said it was readying several patches for Visual Studio and Windows that it plans to release next week. The patches currently due for next weekÂ do not address the problemsÂ with Word and Windows Media Player.
196927
InfoWorld - Mozilla has fixed a critical bug in the way the Firefox browser works with QuickTime media files.
249855
Microsoft Corp. has fixed a problem that made it difficult for users of the most recent Windows Mobile devices to synch with PCs running Vista.
383627
A toolkit designed to exploit a recently-disclosed Microsoft JPEG vulnerability has been released onto the net. The toolkit (screen shot from AV firm F-Secure here) makes it trivially easy for maliciously-minded
356486
Security flaw involving JPEG files affects at least a dozen Microsoft software applications and operating systems.
196662
By ELIZABETH M. GILLESPIE  SEATTLE - Microsoft Corp. is scrambling to update its Windows Media software after a hacker released a program that circumvents a safeguard designed to prevent people from freely copying digital movies and songs.
413276
A fresh version of a program designed to circumvent Microsoft's Windows Media DRM was released on Friday, but the company's saying they're not concerned.
440903
Microsoft's Craig Mundie explains why software needs continually to be patched and updated.
24237
Windows Media Player (WMP) no longer feels like a freebie utility thrown in with the OS (think Notepad), but is an application you&#39;ll actually want to use.
33433
Second security patch in less than a week Apple has plugged two holes in its QuickTime media player that could create serious security problems for people tricked into visiting malicious websites. The release, which is available for both Windows and Mac platforms, is Apple's second security patch in less than a week.â¦
530742
Virus writers and hackers may be able to sidestep Microsoft's big fix.
104408
A software patch to protect your system is available from Microsoft.
344346
A critical bug in the way the Firefox browser works with QuickTime media files is now fixed in today's update.
339285
Microsoft&#39;s Media Center has survived the New Year cull, but it now looks set to inhabit the strange zone of purgatory between being a fully-marketed product and the remaindered bin.