Kazaa Highly Critical Security Vulnerability

[eForm]

Source : Flexbeta (http://www.flexbeta.net/main/comments.php?catid=11&shownews=9102)

A vulnerability in the Altnet Download Manager included in Kazaa has been reported by CelebrityHacker. The vulnerability is caused due to a boundary error within the "IsValidFile()" method in the ADM ActiveX control. This can be exploited to cause a stack-based buffer overflow via e.g. a malicious web site by passing an overly long string to the "bstrFilepath" parameter. In short, an attacker can execute arbritary code if seccessful. The vulnerability has been confirmed in Altnet Download Manager 4.0.0.4 included in Kazaa 2.7.1. Other versions may also be affected. The cure,according to Secunia (http://secunia.com/advisories/12455/), is to remove the Altnet Download Manager ("adm.exe") or uninstall Kazaa.

[lordpake]

Security vulnerability in Kazaa?? NOo wayy! :laugh: I'd call that whole proggie security vulnerability :squint:

[KLITETOOLS]

just like to point out that, this problem is with regular kazaa (kmd) and not klite2.4.4 or klt K++ 2.7.0. as they contain no ad/spyware.

in short if you have kazaa (kmd) and not klite or klt on your pc you need your head examined :) :hammered: :hammered:

[Project-Buckfast]

its good to see ur a full on member nigh KLT ya can keep me up to date!:type:

[KLITETOOLS]

at your service sir :type:

[ToM]

According to recent unconfirmed statistics, anyone using Kazaa will already have on average 74 additional exploits on their PC, caused by their inability to use computers and adapt to today's technology.