Kazaa security hole undermines network

On Friday IT managers got a fresh reason, if they needed one, to keep Kazaa and Grokster peer-to-peer software off users' PCs: an unpatched security hole that affects both applications.

A vulnerability in Altnet Download Manager (ADM) 4.x, installed with Grokster and Kazaa, could allow an attacker to take over a vulnerable PC via a malicious Web page, according to an advisory from Danish security firm Secunia.

ADM is part of a marketing network that runs alongside standard peer-to-peer networks distributing sponsored content. It is installed by default alongside Kazaa and Grokster, two of the most popular file-sharing applications on the Internet. The bug has been confirmed on ADM versions and, but may also affect other versions, Secunia said. ADM is included in Kazaa 2.7.1, and ADM is included in Grokster 2.6.

In the absence of a patch, Secunia advised users to remove ADM ("adm.exe") or uninstall the file-sharing software.

The vulnerability is caused by a boundary error in the "IsValidFile()" method in the ADM ActiveX control, according to Secunia. An attacker could exploit the bug via a website by sending an overly-long string to the "bstrFilepath" parameter, causing a stack-based buffer overflow and allowing the execution of malicious code, the firm said. The vulnerability's discoverer goes by the handle CelebrityHacker, Secunia said.

Secunia said the vulnerability is "highly critical", the fourth-highest of its five severity ratings.

Last week, serious flaws were revealed in WinZip versions 3.x, 6.x, 7.x, 8.x and 9.x that could allow an attacker to execute malicious code on a Windows PC, the WinZip Computing said. A day earlier the Massachussetts Institute of Technology (MIT) warned of vulnerabilities in Kerberos that could allow attackers free access to protected systems.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Matthew Broersma

Show Comments


James Cook University - Master of Data Science Online Course

Learn more >


Sansai 6-Outlet Power Board + 4-Port USB Charging Station

Learn more >



Back To Business Guide

Click for more ›

Most Popular Reviews

Latest Articles


PCW Evaluation Team

Louise Coady

Brother MFC-L9570CDW Multifunction Printer

The printer was convenient, produced clear and vibrant images and was very easy to use

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Walid Mikhael

Brother QL-820NWB Professional Label Printer

It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?