vurattack.blogg.se

They each have proprietary multimedia formats, and none of them play all the formats from the other two.

But wait! It is not that simple! The dominant multimedia players are Microsoft’s Windows Media Player (WMP), Apple’s QuickTime and RealNetwork’s RealPlayer. The traditional answer for multimedia safety is keep the multimedia player updated to the latest version and pray that vulnerabilities are patched faster than hackers discover them. Anti virus software does not reliably detect malware for which it doesn’t yet have a signature. So what can the consumer do to stay safe against multimedia malware that exploits unfixed vulnerabilities? Since the multimedia player is a trusted application, the HIPS (Defense+) will allow it to be hijacked to do almost anything (in Safe or Clean PC Modes). However, notice in the above release notes that many of the “arbitrary code execution” vulnerabilities do NOT involve a buffer overflow.

For example, the release notes for a recent update of QuickTime reveal vulnerabilities in the previous version: About the security content of QuickTime 7.6.2 - Apple SupportĬomodo Internet Security’s buffer overflow protection, in the Defense+ component, prevents a good percentage of malware in multimedia. This malware exploits vulnerabilities in the multimedia player to allow execution of program code embedded in the media. Music and videos downloaded from the internet are an often-ignored source of malware.