Windows media player and activex

Post #284,440 by Silverlock 5/11/07 8:17:25 AM Reply	Windows media player and activex I'm trying to find articles/discussions on windows media player and acivex. I may be remembering this wrong but I thought I had read that wmv files could make system calls with activex controls and had a significant possibility of being a spyware/virus vector. My google-fu must be weak, all I'm getting is page after page of "how to remove DRM". ----------------------------------------- You can fire an at will employee for good cause or no cause, but not bad cause.
Post #284,441 by Another Scott 5/11/07 8:24:59 AM Reply	"Windows Media Player Trojan" gives 610 hits. Without the quotes, it gives 1.5 M. e.g. [link\|http://seclists.org/bugtraq/2005/Jan/0130.html\|seclists] and [link\|http://www.vnunet.com/vnunet/news/2126479/malicious-trojan-infects-windows-media-player\|vnunet]. HTH. Cheers, Scott.
Post #284,442 by Silverlock 5/11/07 9:01:04 AM Reply	Thanks but I already know about the DRM stuff It's the activex aspect I'm trying to pin down. ----------------------------------------- You can fire an at will employee for good cause or no cause, but not bad cause.
Post #284,443 by Another Scott 5/11/07 10:01:26 AM Reply	? The things I found I thought had little if anything to do with DRM. I'd look around bugtraq - e.g. here's a list of threads on [link\|http://marc.info/?l=bugtraq&w=2&r=1&s=wmp&q=b\|wmp]. AFAIK, most of the windows security issues eventually show up there. Good luck. Cheers, Scott.
Post #284,460 by Ashton 5/11/07 4:03:39 PM Reply	Heh.. the 4 ads below are about "How to fix Acti-vex" Nary a one on, "how to use" Acti - - Wonder why.
Post #284,461 by altmann 5/11/07 4:45:07 PM Reply	Maybe this will be of help [link\|http://msdn2.microsoft.com/en-us/library/aa385736.aspx\|http://msdn2.microso...ary/aa385736.aspx] If the file contains no unsupported streams and contains one or more video streams either uncompressed or encoded with any Windows Media video codec, the file must use the .wmv extension. These files may also include PCM audio streams, audio streams encoded with any Windows Media audio codec, script streams, and Web streams. Those sound like possible vectors to me. Or maybe you're thinking of .asf files, also mentioned at that link and described in the surrounding SDK docs. -- Chris Altmann
Post #284,462 by Silverlock 5/11/07 4:47:51 PM Reply	That looks promising. I do know that the word script was referenced in whatever it is I vaguely remember about wmv and spyware. ----------------------------------------- You can fire an at will employee for good cause or no cause, but not bad cause.

Welcome to IWETHEY!