Check Point Discovers Media Subtitle Vulnerability Impacting Millions

ronjor · May 23, 2017

By: Sean Michael Kerner | May 23, 2017

200 million users could potentially be at risk from vulnerabilities in streaming media players that can enable malicious subtitles to takeover systems.
Click to expand...

ichito · May 24, 2017

A vulnerability in how video players load and parse subtitle files allows an attacker to execute code on a target's PC and effectively take over the device.

This vulnerability came to light today after security researchers from Israeli cyber-security firm Check Point published partial findings.

Researchers say that an attacker can craft malicious subtitle files that when loaded inside one of the many vulnerable media players, it executes code on the user's device.
(...)
According to Check Point security researchers, video players like VLC, Kodi, PopcornTime, and Stremio are vulnerable to this novel attack.
Click to expand...

https://www.bleepingcomputer.com/ne...s-can-give-hackers-full-control-over-your-pc/

guest · May 24, 2017

sandbox the player, job done

Minimalist · May 24, 2017

guest said: ↑

sandbox the player, job done
Click to expand...

... or don't load subtitles

guest · May 24, 2017

Minimalist said: ↑

... or don't load subtitles
Click to expand...

i need them, i'm French speaker but i like to watch movies/anime in original languages with English subs
However i usually grab them from the same "trusted" sites & writers.

My media players are sandboxed and Appguard-ed

Log in or Sign up

Check Point Discovers Media Subtitle Vulnerability Impacting Millions

ronjor Global Moderator

ichito Registered Member

guest Guest

Minimalist Registered Member

guest Guest

Log in or Sign up

Check Point Discovers Media Subtitle Vulnerability Impacting Millions

ronjor Global Moderator

ichito Registered Member

guest Guest

Minimalist Registered Member

guest Guest

Useful Searches