News
Contributed by: Lauren Gerber
Date: July 20, 2009
In the olden days when you went out on a date it was very common to listen to popular music on the jukebox. Due to all the modern technology that has come out since then, jukeboxes seem to be more a thing of the past. The joys of the good old days and listening to exciting tunes on jukeboxes is not all lost as modern technology has brought us computerized versions. Despite it's advantages, a vulnerability was confirmed in the exciting MultiMedia Jukebox. This vulnerability has emerged due to a certain boundary error which takes place within the processing of your playlists. If this vulnerability is taken advantage of by malicious online attackers, then the risks are very high of it being exploited in order to launch a buffer overflow attack. This will happen within the data section, although the malicious attacker will first need to trick the victim. The malicious online character will need to manipulate a victim into opening a malicious ".m3u" or alternatively a malicious ".pst" file, which contains an entry which is too long. The MultiMedia Jukebox has so many wonderful and exciting features. The good news is that users are provided with a free trial if they wish, this gives you a special opportunity to see exactly how it works. This MultiMedia Jukebox looks very simple and is very easy to use, but you need not get carried away with its simplistic look as the design behind this Jukebox has been anything but simple. You can use this jukebox with the majority of Windows versions with the inclusion of Windows 98. Some of the files of Windows 98 include the following: ADVGUI.DLL, AECU.SYS, aol40uk.exe, AOL40US.EXE as well as BACKFILL.EXE. This vulnerability has been confirmed in the 4.0 build 020124 version. It is vital for all users to know that other versions may also be affected so you need to be careful. Another impact of this vulnerability is system access, without the authorization which is usually required in normal circumstances. This vulnerability has been rated as moderately critical and may cause users lots of problems if the solution is not applied. This brings me to my next question: what is the solution to this MultieMedia Jukebox player vulnerability? The solution for all users is to never under any circumstances open any playlists which is not trusted. I would like to leave you with a quote in conclusion:"On the Internet, inside information is currency, and there will always be counterfeiters among us." J Michael Straczynski |
|||||
Software Downloads



User Comments