DRM Gone Bad: Microsoft Windows

September 28, 2010

Microsoft has been a strong proponent of digital rights management - especially in its windows operating system - but a recent report on PC World reveals an exploit that uses the very protections the company put in place against users. The exploit involves the msnetobj.dll library, an ActiveX Network Object. The msnetobj.dll library "is intended to prevent the owner of a computer from saving or viewing certain files except under limited circumstances, and to prevent the computer's owner from disabling" the library, according to BoingBoing.

Hackers have figured out that the library is useful for attacking computers. Apparently, the file is susceptible to three different attacks - denial of service, buffer overflow, and integer overflow. These attacks can be triggered when the user is lured to a malicious website set up to exploit the file's weakness. Once in, the site can then allow a hacker to run malicious software on the target machine.

Source PC World, Boing Boing

Posted in

Comments

Re: DRM Gone Bad: Microsoft Windows

When are they gonna phase out ActiveX? It's been nothing but a hole you could drive a tank through.

Re: DRM Gone Bad: Microsoft Windows

I doubt its as much as DRM gone bad but rather complete ineptitude on MSs part to build a easy to use functional rights system that is backed up by a online community. MS shat on it since they are to busy screwing up the 360.....


I have a dream, break the chains of copy right oppression! http://zippydsmlee.wordpress.com/2010/05/21/cigital-disobedience/


Copyright infringement is nothing more than civil disobedience to a bad set of laws. Let's renegotiate them.

---

http://zippydsm.deviantart.com/

Re: DRM Gone Bad: Microsoft Windows

Pretty much the word "ActiveX" is all the explanation anyone should need.

Re: DRM Gone Bad: Microsoft Windows

My first thought was "An ActiveX exploit? NO! That certainly would never happen!"

Re: DRM Gone Bad: Microsoft Windows

Wow, Microsoft better fix this up before shit hits the fan.

http://www.magicinkgaming.com/

Re: DRM Gone Bad: Microsoft Windows

I doubt they'll go out of cycle for this one; expect a patch on Tuesday the 12th.

 
Forgot your password?
Username :
Password :

Shout box

You're not permitted to post shouts.
MaskedPixelanteI'm thinking that in two weeks or so, Microsoft will announce a $300-$350 subsidized Xbox One, depending on the monthly price of Gold next gen.06/17/2013 - 7:04pm
Andrew EisenAnd what, super-over-deliver the value?06/17/2013 - 5:44pm
ZippyDSMleeThen price it at 299. >>06/17/2013 - 5:32pm
Andrew EisenMicrosoft says it's "over-delivering value" with it's $499 price point for Xbox One. http://www.destructoid.com/microsoft-xbox-one-overdelivers-value--256472.phtml06/17/2013 - 3:59pm
ConsterMy phone may have the possibility of an internet connection, but I consider that inferior to it having a radio functionality, allowing me to listen to songs, and record them, for free. Internet is overrated sometimes.06/17/2013 - 1:48pm
Andrew EisenProbably should have said Mattrick STILL doesn't seem to realize...06/17/2013 - 12:23pm
E. Zachary KnightDidn't he say the same stuff before E3?06/17/2013 - 12:18pm
Andrew EisenDon Mattrick doesn't seem to realize that smartphones, tablets and PCs still work when they're not online. http://www.escapistmagazine.com/news/view/125083-Xbox-President-Says-World-Has-Changed-From-Offline-to-Online06/17/2013 - 12:18pm
E. Zachary KnightNolan Bushnell talks about learning through games. Great interview with Reason TV.06/17/2013 - 12:04pm
E. Zachary KnightThat would be neat, but I am thinking more of case mods that still show off the real size of the Ouya. I will have to see what else is out there. The 2600 Joystick may work, but I don't have one to check.06/17/2013 - 12:03pm
ImautobotOr how about an old Atari 2600 casing?06/17/2013 - 11:57am
ImautobotWhy not just put the thing in a old SNES/N64 console housing? I know it would be much bigger, but it's still Nostalgic.06/17/2013 - 11:55am
E. Zachary KnightBut if it is going to run too hot and fry, it wouldn't be worth it. I guess I will have to think of something else.06/17/2013 - 11:23am
E. Zachary KnightThat is why I wanted to check before attemping it. I had hoped that I could fit it inside a cartidge for an old school system like the SNES or N64.06/17/2013 - 11:22am
ImautobotEZK, I noticed that thing puts out some serious heat, without the fan I doubt it would run long.06/17/2013 - 11:09am
E. Zachary KnightAccording to Ouya Support, it is not recommended to remove the fan. I want to do a case mod, but if I can't remove the fan, that puts a wrinkle in it.06/17/2013 - 10:29am
ConsterStill happily rowing my 3DS+PC canoe - ships are overrated.06/17/2013 - 10:01am
ImautobotI'll be keeping my 360, but I don't play online enough to justify keeping XBL. Besides, I'll likely direct those funds to the Playstation Plus Service.06/17/2013 - 9:39am
PHX Corp@Imautobot, I'll still support the xbox 360, just not the xbox one. but I'll be thinking about preordering the PS4 for myself06/17/2013 - 7:57am
ImautobotI pre-ordered my PS4 over the weekend. Oh, and I canceled the auto-renew on my XBL account. That means I've officially jumped the Xbox ship.06/17/2013 - 7:28am
 

Be Heard - Contact Your Politician