Technology news and Jobs 
Information Technology News Microsoft warns of zero-day DirectShow vulnerability
Information Technology News Microsoft warns of zero-day DirectShow vulnerability | Microsoft warns of zero-day DirectShow vulnerability |
|
| by Stephen Withers | |
| Friday, 29 May 2009 | |
|
Page 1 of 2   
Featured Whitepaper
5 Best Practices for Smartphone Support
The vulnerability affects Windows 2000, XP and Server 2003, but not Vista, Server 2008 or Windows 7. The problem is that a maliciously formed QuickTime video file passed to DirectShow can lead to remote code execution with the same rights as the current user. Given that so many people use administrator accounts, a successful exploit could take full control of their systems. As the vulnerability is in DirectShow, it can be exploited whether or not QuickTime is installed on the target system. A malicious video file could be distributed via email or web sites. In the latter case, viewing the relevant page with any browser that uses DirectShow to handle media files will allow the exploit to do its dirty work. There's no timeframe for a fix, but Microsoft does offer three workarounds. Please read on for a link to the most effective and easiest to apply. |
| < Next story in category | Previous story in the category > |
|---|
