by Jeremy Kirk

Attack code targets Media Player flaw

news
Feb 17, 20061 min

Users who have applied the latest round of patches should not be affected by the 'critical' vulnerability

Exploit code has been released targeting a flaw in Microsoft’s Windows Media Player, the French Security Incident Response Team (FrSIRT) warned Friday.

But users who have applied the latest round of patches issued by Microsoft on Tuesday should not be affected. Patch MS06-006 repairs the flaw.

FrSIRT rated the vulnerability as “critical,” while Microsoft graded it as “important.” A bug in the Windows Media Player plug-in could be used to execute arbitrary commands, FrSIRT said.

The flaw is caused by a buffer overflow error that could allow a machine to be taken over if a user was tricked into visiting a specially-crafted Web site using a non-Microsoft Internet browser such as Netscape or Firefox, FrSIRT wrote in its advisory.