full-disclosure - CD-ROM drive opens

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: thor at pivx.com (Thor Larholm)
Subject: CD-ROM drive opens

From: "Treu, Jill" <Jill.Treu@...puware.com>
> Perhaps this could be the issue causing the CD-ROM drive to open?
>
> W32/Magold-D is a memory resident worm that uses email, IRC channels,
> network shared drives and P2P network shares to spread.

It is not a virus, the original poster even included the source code in
question.

Windows Media Player exposes several objects and methods to scripting
through a safe-for-scripting, signed ActiveX control. Among those objects
are the CD drive objects, which each have an Eject method. This is
documented functionality in WMP, if you want to you can easily push the
drive in and out in a constant cycle.

If you don't like the features then don't use the product :)

I remember people asking questions about ejecting CD drives back in 2000,
and remember putting up an example in early 2001 (
http://jscript.dk/2001/3/cdrom.jpg ).

Regards
Thor Larholm
PivX Solutions, LLC - Senior Security Researcher