Microsoft Patches Media Player 10

By Ed Oswald | Published February 16, 2005, 2:13 PM

Microsoft on Wednesday issued an updated Windows Media Player 10 to correct a potential security issue that could allow an attacker to mislead users into downloading malware or viruses instead of a license to playback DRM content.

A spokesperson for Microsoft confirmed that the new WMP release, marked build 3802, was the promised update to take care of issues related to the player's digital rights management functions.

As reported by BetaNews, Microsoft originally refused to fix the problem, claiming it was not an actual vulnerability. However, after criticism from security analysts, the company did an about-face and announced a patch would be made available within thirty days.

Nonetheless, Microsoft has maintained that the problem is not a security hole. "Microsoft stated several weeks ago that they were looking into the issue and while it is an unintended use of WM DRM, it is not a security hole," a company spokesperson told BetaNews in January.

Microsoft is urging consumers to upgrade their software. Windows Media Player 10 build 3802 may be downloaded via FileForum.

Comments

View comments by with a score of at least

How old is this prog & already reciving 1st patch !!

Sloppy, Sloppy, Sloppy!

Score: 0

|

Hey acey Doesn't mean the program is sloppy. Even in programming or with anything else for that matter for will always have to come back for a revision or two nothing is ever perfect, remember buddy stability comes from continuiously reassessing a certain issue and making sure it doesn't pop up and if it does to make sure that you can atleast narrow it down to it's simplest form. Just like anything else in life as well as programming or patches. etc etc...

Score: 0

|

"...a POTENTIAL security issue that COULD allow an attacker to MISLEAD users into downloading malware or viruses instead of a license to playback DRM content." (emph. added)

Yes, I still consider this something that MS needs to patch, but come on, people, this is quite a stretch. It has the potential issue that could mislead users? I agree with the MS company spokesman, this isn't a security hole. Like the internet, wmplayer is a tool, used for good but can be used maliciously. Tools do that--does my hammer have a vulnerability because it can be "exploited by a malicious user" to knock someone unconscious?

Score: 0

|

Translation:

Yet another minimal security issue that requires a virgin to be sacrificed during the full moon on Alpha Centauri after willingly putting oneself in the oncoming path of a Mack truck to be affected by it. It's just more grist for the trendy and often mindless MS naysayers.

Is there a risk?

Yes.

Is it a serious one?

No.

Should it be patched?

Of course.

Will it be blown out of proportion by the press and the anti-MS rabble?

Assuredl;y.

Yawn.

Score: 0

|

Why was is this not available as a 'patch'? M$ is realeasing this as a seperate program.

Score: 0

|

When I do a "Check for Updates" in WMP10 that it says I'm using the most current version? You'd think that they'd have that ready before urging the world to update their software due to a security hole.

Score: 0

|

Because Windows doesn't find this as a problem themselves, so they could really care less if the user upgrades or not.

Score: 0

|

Bakura it means they probably haven't updated their databases or server with the WMP 10 update yet and only uploaded it to their server.. If you remember the same thing happened when SP 2 Was coming out.. First to the MSDN subscribers then they posted the download link for the SP2 download, but it didn't show up on the Windows Update site til a week after its release.. Gotta give stuff time man be patient and meanwhile just downlaod it from here it's not a problem I mean either way you're getting the same version .. What's there to complain about :)

Score: 0

|

I'm just surprised Microsoft has a program that has a security issue. Seems impossible since they are so popular lol

Score: 0

|

Google rolls out real-time search, Near Me Now, extended personalization

Over time, searches from PCs and mobile phones will grow even "more personalized." But what about user privacy and search results that give you "the truth"?

Intel's marriage of CPU and GPU not ready for prime time

Although there will be an Intel component this month that can compute and plot in parallel, Betanews was told today, it won't be based on Project "Larrabee."

An alternative to Research in Motion's enterprise e-mail? There's an app for that

Good Technology today released an iPhone app compatible with its enterprise e-mail solution.

Playing catch-up in 2010: Windows Mobile, BlackBerry, and Symbian

Microsoft, RIM, and Nokia are each working on improved mobile operating systems. But could these efforts add up to too little, too late?

Windows fix for TLS security bug still forthcoming, won't be Tuesday

Anyone looking for a fix for last month's discovery of a potentially serious security hole in TLS and SSL may have to wait until everyone is ready to act together.

Not the first, not the last, technology predictions for 2010

Carmi Levy | Wide Angle Zoom: The real truth is probably that what went around in 2009, will come around to haunt us next year.

Google Goggles: Hands on with the Shazam of the Real World

Google today unveiled Goggles, its visual search lab for Android devices that identifies objects by sight.

Microsoft: Windows 7 Family Pack wasn't 'pulled,' it just sold out

If you hurry, you may still be able to find the last Family Pack upgrade editions hanging around retail store shelves, but probably not so much online.

Clever iPhone game returns after being bumped over a name dispute

The game's simple concept and multitude of platforms and puzzles manage to pull off a retro, 8-bit style that's reminiscent of an old Atari game given a modern makeover.

Report: Microsoft to randomize Europe's browser screen choices

The fact that "A" is for "Apple" was apparently at the heart of browser vendor objections to Microsoft's alternative to listing IE first.

Will Nokia's plans further alienate American consumers?

A look at Nokia's plans for the coming years does little to shine up the company's increasingly dull image.