-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

          0 10 20 30 40 50 60 70 80 90 100
          |----|----|----|----|----|----|----|----|----|----|
          ...................................................
                           .---------------.
                          / NtWaK0 Advisory \
+-----------------------------------------------------------------------.
                                                                        :
Affected : 2K, with RealPlayer Installed. I did not test XP :
Type : 100 % CPU utilization :
Date : 28-02-2002 :
Author : NtWaK0 www.SafeHack.com :
+-----------------------------------------------------------------------.

+---------------------.
 100 % CPU utilization \
+-----------------------`-----------------------------------------------.
                                                                        :
+-----------. :
 Disclaimer \ :
+-------------`---------------------------------------------------------.
The information in this advisory is believed to be true based on :
experiments though it may be false. The opinions expressed in this :
advisory and program are my own and NOT of any company. :
In Fact I do not work for no one at the present time. :
                                                                        :
This material is presented for informational and entertainment purposes :
only, and to satisfy the curious. Any activities described in this file :
which involve vandalism, theft, or any other illegal activities are :
recounted from third-party conversations. I do not condone or encourage :
vandalism or theft. I do not accept any liability for anything anyone :
does with this information. So, don't shoot the messenger. :
Remember: Use a computer in ways that ensure respect for your fellows. :
                                                                        :
+-------------. :
 Brief History \ :
+---------------`-------------------------------------------------------.
You are affected if you have RealPlayer installed on 2K and your :
browser open MP3 file using RealPlayer. :
                                                                        :
+---------------------------+ :
>>> Test OS Applications <<< :
+---------------------------+ :
Tested on Windows 2K, XP with Realplayer Plys 8 Installed. Maybe other :
versions of Realplayer are affected too. I do not have other versions :
                                                                        :
                                                                        :
+-----------. :
 The Problem \ :
+-------------`---------------------------------------------------------.
To see the problem do the following steps: :
1- Make sure you have Windows RealPlayer installed :
2- Make sure that .mp3 file will be opened using Realplayer. Normaly :
   this is the default after you install Realplayer. :
3- Take any non .mp3 file say virus.exe rename it to virus.mp3 :
4- Create an HTML file that open test.mp3 :
   <p><a href="test.mp3">test</a></p> :
5- Put the files test.mp3 and test.html on your web server :
6- Open http://www.yourwebserver.com/test.html :
7- HIT CTRL+DEL+ALT and check your CPU it should be 100 % if Realplayer :
   open. :
                                                                        :
I have a test page on www.safehack.com/testpage/test1.htm :
                                                                        :
The problem is Realplayer will open and will try to connect and play :
the NON valid mp3 file. :
                                                                        :
This issue does not happen if your default mp3 player is winamp or ohter:
                                                                        :
Another behavior I did notice id the html link point to file.exe.mp3 :
<p><a href="test.exe.mp3">test</a></p> in this case Winamp will open :
not Realplayer. :
I have a test page on www.safehack.com/testpage/test2.htm :
                                                                        :
This test page will open Winamp even if your default is Realplayer :
                                                                        :
+------------. :
 The Solution \ :
+--------------`--------------------------------------------------------.
Don't Make Realplayer your default to open mp3 files :
+-----------------------------------------------------------------------.

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.1

iQA/AwUBPHzjCvPoW9fFNsN8EQJXRQCfWuXu1HgCgSHiIzbwIGZqqQNu4OkAoLLG
yttXGIo6CNCNwwdOImhRAqcV
=kFOZ
-----END PGP SIGNATURE-----

________________________________________________________________________
The only secure computer is one that's unplugged, locked in a safe,
and buried 20 feet under the ground in a secret location... and i'm
not even too sure about that one"--Dennis Huges, FBI.
____________________________________________________________.___________
Live Well Do Good www.SafeHack.com |
Je Pense, Donc Je Suis \(|)/
I know I ain't perfect, but i'm 99 point 9 percent :) --(")--
RFCs are meant to be read and followed…:) /`\ NtWaK0
________________________________________________________________________
Connect yourself to the main computer and let me take you to a
cybernetic ride. Are you connected to the right cybernet? If you are,
finally you are connected to my brain.
________________________________________________________________________
-=- Use a computer in a ways that ensure respect for your fellow -=-

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]