DRM Gone Bad: Microsoft Windows

September 28, 2010 -

Microsoft has been a strong proponent of digital rights management - especially in its windows operating system - but a recent report on PC World reveals an exploit that uses the very protections the company put in place against users. The exploit involves the msnetobj.dll library, an ActiveX Network Object. The msnetobj.dll library "is intended to prevent the owner of a computer from saving or viewing certain files except under limited circumstances, and to prevent the computer's owner from disabling" the library, according to BoingBoing.

Hackers have figured out that the library is useful for attacking computers. Apparently, the file is susceptible to three different attacks - denial of service, buffer overflow, and integer overflow. These attacks can be triggered when the user is lured to a malicious website set up to exploit the file's weakness. Once in, the site can then allow a hacker to run malicious software on the target machine.

Source PC World, Boing Boing

Posted in

Comments

Re: DRM Gone Bad: Microsoft Windows

When are they gonna phase out ActiveX? It's been nothing but a hole you could drive a tank through.

Re: DRM Gone Bad: Microsoft Windows

I doubt its as much as DRM gone bad but rather complete ineptitude on MSs part to build a easy to use functional rights system that is backed up by a online community. MS shat on it since they are to busy screwing up the 360.....


I have a dream, break the chains of copy right oppression! http://zippydsmlee.wordpress.com/2010/05/21/cigital-disobedience/


Copyright infringement is nothing more than civil disobedience to a bad set of laws. Let's renegotiate them.

---

http://zippydsm.deviantart.com/

Re: DRM Gone Bad: Microsoft Windows

Pretty much the word "ActiveX" is all the explanation anyone should need.

Re: DRM Gone Bad: Microsoft Windows

My first thought was "An ActiveX exploit? NO! That certainly would never happen!"

Re: DRM Gone Bad: Microsoft Windows

Wow, Microsoft better fix this up before shit hits the fan.

http://www.magicinkgaming.com/

Re: DRM Gone Bad: Microsoft Windows

I doubt they'll go out of cycle for this one; expect a patch on Tuesday the 12th.

 
Forgot your password?
Username :
Password :

Poll

Will Code Avarice's Paranautical Activity make its way back onto Steam?:

Shout box

You're not permitted to post shouts.
Neo_DrKefkawith a neutral party Moderating it. I've been waiting a long time for a GamerGate to happen but now all I want is the healing to start. Weird huh? Gamers don't need to be attacking gamers we should all be on the same side10/24/2014 - 12:39am
Neo_DrKefkaRight now from what I seen your tweet and the other guys tweet there are hard feelings. Until we start a dialogue with each other I think it will get worse before it will get better. I hope you guys work something out meet in a neutral stream10/24/2014 - 12:37am
Neo_DrKefkaThanks James. Even if a hot/hard headed person likes me thinks the public needs to sit down and discuss this together. We all might not agree right now but if the public does not start talking to each other we are not going anywhere.10/24/2014 - 12:36am
james_fudgeHey guys I had a nap because, getting old! I'll take a look.10/24/2014 - 12:01am
Matthew Wilsonjames needs to contact Totalbiscuit than10/23/2014 - 10:07pm
Neo_DrKefkaJames said earlier he went into a stream earlier informed them who he was and they didn't care. If James is trying to talk lets set something up?10/23/2014 - 9:38pm
Matthew WilsonTotalbiscuit has been trying for months, no one that is anti gg seems to want to talk with him on camera10/23/2014 - 9:20pm
Neo_DrKefkaHey James check your twitter. Check with Totalbiscuit see if you can get a round table discussion stream going see if he can get some pro gg people and you can get some gamejournopros. Both sides have been hurt, doxxed its time every1 sits down and talks10/23/2014 - 9:05pm
Matthew Wilsonthe wiiu will support up to 8 gc controllers http://www.smashbros.com/us/howto/entry10.html10/23/2014 - 7:50pm
quiknkoldmewtwo is a timed free exclusive. you can purchase him if you dont have both.10/23/2014 - 7:15pm
Neo_DrKefka@Monte A month and a half ago we had a lot of streams about solutions now all the streams are KingofPol styled rants about getting drunk. All Gamergate is about to many is for people to use the movement to jump start careers.10/23/2014 - 7:12pm
Neo_DrKefkaWhose stream where you in James?10/23/2014 - 7:02pm
Matthew Wilsonyup they are holding mewtwo hostage lol10/23/2014 - 5:59pm
MaskedPixelanteApparently Mewtwo is going to be a free download to anyone who bought both versions of Smash 4.10/23/2014 - 5:41pm
TechnogeekYou would also think that if GG gave a shit about journalistic ethics, Game Informer would have been the very first line of their boycott list.10/23/2014 - 5:32pm
MaskedPixelanteRidley confirmed for Smash Wii U... as a stage buddy like the Yellow Devil and flying man.10/23/2014 - 5:31pm
prh99Rather than trying to spin it as some sort of artistic choice, they should just say they don't want to rework the engine to either decouple the mechanics or make them work at 60fps.10/23/2014 - 5:25pm
Matthew Wilsonubisoft is made to look worse now. wiiu smash is 1080p 60fps lol10/23/2014 - 5:02pm
MonteYou would think that, if GG were really about journalistic ethics, their streams would be more conerned with Shadows of mordor(a REAL controversy involing a major publisher) than with the FALSE jounralistic controversy around Quinn10/23/2014 - 4:49pm
Andrew EisenHope so.10/23/2014 - 4:45pm
 

Be Heard - Contact Your Politician