Wiz... Winamp Questions

Richard Sinkler · Post by **Richard Sinkler** » 4 Mar 2011 3:22 pm

Could you elaborate on what problems the hackers actually cause. You mentioned that in another thread on Media Player.

Are other media players as vulnerable and do they get hacked?

Wiz Feinberg · Post by **Wiz Feinberg** » 4 Mar 2011 3:48 pm

See this Secunia Security Advisory about the last Winamp Update, for the details about the vulnerability that was patched in December.

Richard Sinkler · Post by **Richard Sinkler** » 5 Mar 2011 11:19 am

Thanks Wiz... I hardly ever run across stuff like that, so it's nice to have guys like you and the others "gurus" here to keep us on the ball. Although I won't try to pretend I understand exactly what the report told me, it's nice to know.

Successful exploitation allows execution of arbitrary code.

What exactly does this mean? They can enter my 'puter and start my applications, or do they install some damaging program and then execute it? I'm pretty dumb when it comes to just how these security and virus problems happen.

Wiz Feinberg · Post by **Wiz Feinberg** » 5 Mar 2011 4:27 pm

"Successful exploitation allows execution of arbitrary code" means that the people running the exploit page that infects your PC, through Winamp or any other successfully exploited software, can download and install backdoors, rootkits, spam bots, attack tools, banking Trojans, keyloggers, spyware, adware, or fake AV programs at their will.

Richard Sinkler · Post by **Richard Sinkler** » 5 Mar 2011 4:59 pm

Thanks. Doesn't sound good. I'm assuming the latest update stops this?

What about other players like Windows Media Player?

Wiz Feinberg · Post by **Wiz Feinberg** » 5 Mar 2011 10:06 pm

Richard Sinkler wrote:Thanks. Doesn't sound good. I'm assuming the latest update stops this?

What about other players like Windows Media Player?

Yes, Winamp was updated to plug that hole, on December 7, 2010. That's what Windows Updates are for. There have been a few recent exploits that targeted Windows Media Player, that were fixed by various Windows Updates. People who don't patch their computers are usually botnetted or otherwise infected with various and sundry types of malware.

Richard Sinkler · Post by **Richard Sinkler** » 6 Mar 2011 2:23 am

I take updates seriously and try to update when they are available. The Windows updates always cause some sort of problems, so I hesitate a few days when I get them. I think they put a timer in the updates, because if I don't install the update within a few days, it installs automatically without telling me. The only way I know it happens is when I get the dialog box telling me it updated and the computer is going to restart in about 15 minutes. And of course I am usually doing something important and have to save files and shut down. Big pain in my butt.

You can probably close this now. Thanks for the info.