Links ARCHIVE: CNET NEWS.com - WinAmp Flaws And Spyware
flaw, infect, spyware, themes, GUI
http://news.com.com/Digital+attacks+on+Winamp+use+%27skins%27+for+camouflage/2100-1002_3-5323990.html?tag=st_lh
from 
JoeUser Forums
JoeUser Forums
SOURCE: CNET NEWS.com
Digital attacks on Winamp use 'skins' for camouflage
Published: August 25, 2004, 4:36 PM PDT
By Robert Lemos
Staff Writer, CNET News.com
Beware of wolves in llama's clothing.
That's the lesson for Winamp users, after a group of security researchers discovered that spyware makers are using a flaw in the way the multimedia software loads graphical themes, or skins, to infect PCs with their wares. The digital music player--made by America Online subsidiary Nullsoft, whose informal mascot is the llama--improperly allows the skin files to run programs.
The flaw is being used by some spyware makers to infect people's computers with their illicit programs, according to another group of researchers, at French company K-Otik Security. The attack had been used to spread spyware among Internet relay chat users, infecting a computer after the victim clicked on a Web address that appeared in the chat window.
"We received several reports from users who were hacked after clicking on a link distributed on several IRC (Internet relay chat) channels," said Chaouki Bekrar, a consultant and co-founder of K-Otik. Clicking on the link infected the users' computers and sent out additional instant messages, Bekrar said.
The vulnerability is the latest flaw to arrive without warning. Knowledge of such flaws--known in technical circles as zero-day, or 0-day, vulnerabilities--can spread widely before the software developer can even fix the problem. A similar issue in Microsoft's Internet Explorer browser enabled spyware intruders to load software onto the PCs of visitors to an intruder's Web site...
For more, click on the link provided...
Digital attacks on Winamp use 'skins' for camouflage
Published: August 25, 2004, 4:36 PM PDT
By Robert Lemos
Staff Writer, CNET News.com
Beware of wolves in llama's clothing.
That's the lesson for Winamp users, after a group of security researchers discovered that spyware makers are using a flaw in the way the multimedia software loads graphical themes, or skins, to infect PCs with their wares. The digital music player--made by America Online subsidiary Nullsoft, whose informal mascot is the llama--improperly allows the skin files to run programs.
The flaw is being used by some spyware makers to infect people's computers with their illicit programs, according to another group of researchers, at French company K-Otik Security. The attack had been used to spread spyware among Internet relay chat users, infecting a computer after the victim clicked on a Web address that appeared in the chat window.
"We received several reports from users who were hacked after clicking on a link distributed on several IRC (Internet relay chat) channels," said Chaouki Bekrar, a consultant and co-founder of K-Otik. Clicking on the link infected the users' computers and sent out additional instant messages, Bekrar said.
The vulnerability is the latest flaw to arrive without warning. Knowledge of such flaws--known in technical circles as zero-day, or 0-day, vulnerabilities--can spread widely before the software developer can even fix the problem. A similar issue in Microsoft's Internet Explorer browser enabled spyware intruders to load software onto the PCs of visitors to an intruder's Web site...
For more, click on the link provided...
