Slashdot Mirror
Image Causes Exploitable Overflow in Microsoft Products
Em Adespoton writes "Core Security researchers discovered that by electing a specially-crafted graphic as the user's display picture in MSN Messenger, an attacker could trigger a buffer overflow vulnerability on the chat partner's computer. Through this, it is possible to covertly take over machines running instant messaging software. Windows Messenger and Windows Media Player are also affected by this vulnerability. The story is also available at Newsfactor.com and SearchSecurity.com."
Microsofts loss is my GAIM.
ha.
Animated pictures of shiny pocketwatches moving back and forth were found to be the most effective at taking control of other people's computers.
I'm a big tall mofo.
Hello? Didn't you get the memo?
MS Security Chief Says Windows is Safer Than Linux
Now stop trying to spread FUD.
- For the complete works of Shakespeare: cat
I can't belive that.. but i love all my microsoft products.. they must be wrong, microsoft doesn't have security flaws!! and my MSN messanger is totally safe, and all my WMA and WMV files are so totally secure! /sarcasm
President Bush Supporter
If only I had Bill Gate's MSN . . .
By spreading to everyone in your buddy list, a worm based on this exploit could infect 90% of the world in a couple hours.
I'm doing my part. I don't have any friends.
IT: MS Security Chief Says Windows is Safer Than Linux....
Mike Nash, Microsoft's Chief of Security was found dead in his Redmond, WA office. The cause of death is currently under investigation, but sources close to the investigation have suggested that both his feet were jammed firmly down his throat and he may have choked to death as a result.
who finds it funny that the Google ads for the article show an advert for MSN Messenger?
There is a huge difference.
http://blog.monkeymethods.org/images/billgates01.j pg
Enough to make any buffer quit really...
A friend of mine used the goatse image for his MSN person icon and I had a buffer overflow of my own.
When did I ever eat corn?
More
The image that triggers it is an inverted picture of Bill Gates playing cards with Sadam, Satan, and Celine Dion.
Isn't this the same technique Geordie LaForge came up with for introducing a virus into the Borg collective? Remember Hugh?
Maybe the image of Bill Gates-as-Borg was a little more prophetic than we all realized.
News Update: Woman Gives Birth
Breaking Story: Actor Turns Politician
Headline: Sun Rises in East...AGAIN!
*sigh*
What? I thought all this time they were *Portable* Network Graphics. Well, the article says "Proprietary" so they must be right.
lorem ipsum, dolor sit amet
I used to struggle with the "why do they keep using it, when there are so many (much better) alternatives" question. I see now how silly my confusion was. It's all so clear...
Windows... Is a video game!
Sure, think about it. Can you hack your friend Billy's computer before he hacks yours while you chat online? The suspense must be very exciting. Who has the better Script? Who has the better collection of vulnerabilities?
It must be almost like playing Magic: The Gathering, or one of the other card games kids are into now. "My hack trumps yours! I get all your pr0n!"
Suddenly I feel very boring. Sigh... It's okay, Slackware, I love you even IF you're secure. I'll just have to settle for being Rudolph, and not play in any Reindeer Games.
Oh! Look! My Microwave just beeped! Pea Soup!
Mmmm!
Farewell! It's been a fine buncha years!
no, it's Pornographic Network Graphics, your definition is just a smoke screen so the religious right doesn't get all fired up
US Democracy:The best person for the job (among These pre-selected choices...)
Exploitable Overflows Cause Bad Image
(A day like every day in Redmond)
Shhh... quiet!
Don't you realize you've said two things that will get you lynched by the Slashdot crowd? First, you point out that the vunerability isn't in MS code. Second, you mention that they're using an open source library!
You're probably marked for death now by the Slashdot enforcers. Hope you had fun living.
"You know your god is man-made when he hates all the same people you do."
Don't worry, I've sent everyone the patch via a .png file.
I don't think you understand.
1. Claim Linux is more secure than windows.
2. Someone finds exploit in Linux
3. Cry FUD
4. Profit
> Never read Snow Crash, but the proper pluralization of cherub is cherubim. (::seraph:seraphim::nephil:nephilim, etc.)
Sheesh, evil *and* a jerk. -- Jade
Oh, that's just peachy. An army of Microsoft Robots (TM), all with their security holes, easily programmed to destroy humanity. Good thing they won't work long enough before a reboot to do too much damage!
So instead of Cherubs, they have Tub Girl.
Did I really just write that? :P
"History doesn't repeat itself, but it does rhyme." Mark Twain