Timeline for Can a rogue .wmv file "hijack" Windows Media Player?
Current License: CC BY-SA 3.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 14, 2016 at 4:17 | history | protected | CommunityBot | ||
| Nov 23, 2015 at 2:40 | comment | added | user7933 | Analysis of the file linked: virustotal.com/en/file/… | |
| Nov 22, 2015 at 21:27 | comment | added | Alec Teal | Without reading other answers I can tell you: maybe. Codecs are bitches to write because they're basically (LL(1)) parsers, state machines, and it's very tempting to be lazy and just use pointers+offsets-read-from-files and such, as we cannot see the source code and anyone with an exploit (who is bad) would want it known that they've done it, all we can do is confirm if it /has/ been exploited before by finding a case for it, the absence of a case is inconclusive. | |
| Nov 22, 2015 at 19:29 | vote | accept | user4520 | ||
| Nov 22, 2015 at 19:16 | history | tweeted | twitter.com/StackSecurity/status/668508343489662976 | ||
| Nov 22, 2015 at 17:21 | answer | added | André Borie | timeline score: 112 | |
| Nov 22, 2015 at 16:00 | answer | added | Tilman Schmidt | timeline score: 3 | |
| Nov 22, 2015 at 15:53 | comment | added | deviantfan | Anyways, yes it's probably a problem in the used software (not necessarily the media player, could be WIndows itself, etc.etc). About the AV thing: Ask them if they want it. About your computer: Don't trust anything anymore, wipe it, and make a clean reinstall. About the future: Don't use any questionable file sources anymore... | |
| Nov 22, 2015 at 15:51 | comment | added | deviantfan |
How does this thing work? It couldn't have possibly affected my Windows Media Player executable before it was played because it's a media file. That's wrong. While unlike that it did something before playing in this case, it's not guaranteed in any way. Because I doubt Microsoft would allow media files to specify a site to download codecs from If web sites can specify binarys to run in IE...
|
|
| Nov 22, 2015 at 15:34 | history | edited | user4520 | CC BY-SA 3.0 |
added 21 characters in body
|
| Nov 22, 2015 at 15:27 | history | asked | user4520 | CC BY-SA 3.0 |