Windows Media Player flaw denied
Researchers reckon a security bug in Windows Media Player creates a means for hackers to inject hostile code onto vulnerable systems. However Microsoft has denied this, saying that the bug only creates a means to crash the software without posing a more damaging security risk.
The WMP integer overflow bug reportedly kicks in when the media player attempts to process maliciously constructed WAV, SND, or MIDI files. Security researchers have created proof of concept code demonstrating the vulnerability, the SANS Institute's Internet Storm Centre reports.
Fully patched Windows XP systems running either Windows Media Player 9 and 11 are each potentially vulnerable, according to tests by SecurityTracker. Other configurations may also be affected.
