Page 1 of 1

VLC behaviour on ASF script commands

Posted: 05 Sep 2011 17:52
by JimM11
Hello,
how does VLC behave when there are scripting commands in an ASF type media file? I know it to be a major security problem with Windows Media Player but have not found any info how VLC handles it.

Does it execute those commands and if yes, on all platforms or only Windows?

Here are links about the issue in windows media player
http://support.microsoft.com/kb/828026
http://code.google.com/p/videosearcher/

Thanks for any response :)

Re: VLC behaviour on ASF script commands

Posted: 05 Sep 2011 23:35
by Jean-Baptiste Kempf
VLC doesn't execute them at all...

Re: VLC behaviour on ASF script commands

Posted: 06 Sep 2011 08:24
by JimM11
Thanks for your reply :)

It is how I thought then. Actually I will recommend vlc to a friend of mine, who uses Win7 and OSX (laptop). One argument, I wanted to give is security. I know there can be bugs in the code but I wanted to tell him that VLC is not prone to these kind of "script attacks" in media files.

Could I say, generally, that VLC won't execute any embedded scripts, even if the file format permits it?

Thanks again :)

Re: VLC behaviour on ASF script commands

Posted: 06 Sep 2011 10:57
by Jean-Baptiste Kempf
Thanks for your reply :)

It is how I thought then. Actually I will recommend vlc to a friend of mine, who uses Win7 and OSX (laptop). One argument, I wanted to give is security. I know there can be bugs in the code but I wanted to tell him that VLC is not prone to these kind of "script attacks" in media files.

Could I say, generally, that VLC won't execute any embedded scripts, even if the file format permits it?

Thanks again :)
Yes, because, usually, we don't have the specs and embedded scripts are difficult to support without the specs.