Vulnerability affects processing of PNG files
Vulnerability affects processing of PNG files

Virus warning hits Windows Media Player

Users urged to be careful when viewing PNG images

Robert Jaques

Computer users have been warned to be on their guard when viewing images after the discovery of a vulnerability affecting the processing of PNG (Portable Network Graphic) files by popular applications including MSN Messenger and Windows Media Player.

The issue affects applications including Windows Media Player 9.0 (when running on Windows 2000, XP Service Pack 1 and Server 2003), Windows Messenger version 5.0 (standalone version that can be installed on all supported operating systems), and MSN Messenger 6.1 and 6.2.

Advertisement

The PNG format is used by these applications to view icons or any other kind of image. The flaw centres on an error in the processing of these types of files, and could allow arbitrary code to be run on vulnerable systems. A similar problem was discovered with Jpeg files in September last year.

Considering the widespread use of the affected applications, IT security firm Panda Software warned that it is "highly likely" that viruses will emerge to exploit the problem.

Luis Corrons, director of PandaLabs, said: "Every time a security problem is detected in a popular program, the creators of malicious code start trying to find an exploit as quickly as possible.

"Judging by past experience, it is clear that the time gap between the discovery of a vulnerability and the emergence of a virus that takes advantage of it is shortening. For this reason it is important to stay up-to-date on the latest releases for the programs you have on your computer."

Panda urged PC users to download the Microsoft patch that resolves this problem, which can be found here.

Microsoft released a dozen patches on 8 February to fix a range of vulnerabilities, some of which were rated 'critical'.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Mydoom.bb spreading in the wild

Latest Mydoom mutant on the loose

Security experts raise risk assessment on Mydoom.bb

Virus displays nationalist slogan

'Deadcode' virus attempts political mischief

Malicious code infects executable files

HP claims to 'throttle' viruses

Security software promises to control spread of viruses across networks

Microsoft urges users to patch critical flaws

Vulnerabilities could allow hackers to take full control

Related whitepapers

Related jobs

Most watched

Social networking

Summit: How businesses should manage their brands online

In part one of V3.co.uk's interview with Dirk Singer, he dicusses social media monitoring strategies

RIM discusses new developer tools

Blackberry exec on the latest offerings for programmers

Analysis and Reports

Remote access - Three steps to getting connected

3.4 million UK professionals now work from home – is your company equipped?

Cost benefits of a global collaboration network

This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

simon perry

Comment: Information overload is a price worth paying if it helps the planet

Analyst Simon Perry argues that the data deluge doesn't have...

Summit: Views From the Valley

V3.co.uk's US office weighs in on the information overload crisis

money

Summit: Managing information overload in a recession

Balancing exploding data with shrinking budgets

Chambers outlines Cisco's corporate plans

CEO describes broader company focus

Primary Navigation