Technology news and Jobs 
Information Technology News September Patch Tuesday: a critical day for media files at Microsoft
Information Technology News September Patch Tuesday: a critical day for media files at Microsoft | September Patch Tuesday: a critical day for media files at Microsoft |
|
| by Stephen Withers | |
| Wednesday, 10 September 2008 | |
|
Page 2 of 3 The developer tools listed are not of themselves vulnerable to the issue, but are provided so that applications developed with them can be rebuilt without the flaw.Featured Whitepaper
5 Best Practices for Smartphone Support
The Side by Side Cache is designed to accommodate applications that request a particular version of a DLL, but such rules allow the normal behaviour to be overridden when it is determined that previous versions include a significant vulnerability. While this does open the possibility that an application might fail if it really does depend on a specific version of a DLL, the old saying "better safe than sorry" is applied. The second vulnerability involves audio files played by Windows Media Player. It can be exploited by streaming a maliciously crafted file from a Windows Media server to Windows Media Player. It's probably a little harder to tempt victims to listen to a particular playlist than it is to get them to visit a web page, so in one sense this is probably less serious than the GDI+ issue. However, it still has a critical rating. The flaw is present in Windows Media Player 11. Earlier versions are not affected. Once again. an exploit only has the same rights as the user, so running as an administrator increases the scope of a successful exploit. Vulnerabilities in Office and Windows Media Encoder - see page three . |
| < Next story in category | Previous story in the category > |
|---|
