bugtraq - Windows Media files allow opening any url in Internet Explorer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Sat, 1 Jan 2005 19:40:21 +0100 (CET)
From: "Berend-Jan Wever" <skylined@...p.tudelft.nl>
To: bugtraq@...urityfocus.com, full-disclosure@...ts.netsys.org
Subject: Windows Media files allow opening any url in Internet Explorer

PC World has published an interesting article:
http://www.pcworld.com/news/article/0,aid,119016,00.asp

Short version:
The Digital Rights Management for Windows Media files allows opening
arbitrary urls in Internet Explorer.

Impact:
MSIE browser vulnerabilities can now be exploited through wma files,
allowing virii, worms and other kinds of malware to spread through P2P
networks.

Happy new year!

Cheers,
SkyLined