Ludovic Fauvet VideoLAN developer came out swinging against the companies that make up the adware and spyware with open source VLC media player.
"The VideoLAN we really tired of all these sites / companies are tricking users to download malware and violating our IP distributing misleading versions of VLC, not in accordance with the GPL," said Fauvet.
"What disturbs us most is that many of them are different VLC bundling crapware to earn in order to trick users into thinking that you are downloading the original version. This is not acceptable," he added.
Fauvet-called, and shame, at least 25 companies that were guilty of bundling spyware and adware with the well-designed open-source media player.
"The result is a bad product does not work as expected, that can not be removed, and that a clear abuse of users and their privacy. Not to mention that shames us to volunteer, and it is time, time that is not invested, "he said.
Fauvet urged users to always download the VLC media player from the official website of the project.
VideoLAN provided separately for a couple of patches as "highly critical" security vulnerabilities that expose users to computer hijacking.
* An integer overflow error when parsing a data block in RealAudio RealMedia (RM) files can be exploited to cause a buffer overflow.
* Integer overflow error in the analysis of "STRF" piece in AVI files can be exploited to cause a buffer overflow.
Successful exploitation of the vulnerability allows execution of arbitrary code, Secunia said in an opinion.
The vulnerabilities are confirmed in version 1.1.10. Previous versions may also be affected.
"The VideoLAN we really tired of all these sites / companies are tricking users to download malware and violating our IP distributing misleading versions of VLC, not in accordance with the GPL," said Fauvet.
"What disturbs us most is that many of them are different VLC bundling crapware to earn in order to trick users into thinking that you are downloading the original version. This is not acceptable," he added.
Fauvet-called, and shame, at least 25 companies that were guilty of bundling spyware and adware with the well-designed open-source media player.
"The result is a bad product does not work as expected, that can not be removed, and that a clear abuse of users and their privacy. Not to mention that shames us to volunteer, and it is time, time that is not invested, "he said.
Fauvet urged users to always download the VLC media player from the official website of the project.
VideoLAN provided separately for a couple of patches as "highly critical" security vulnerabilities that expose users to computer hijacking.
* An integer overflow error when parsing a data block in RealAudio RealMedia (RM) files can be exploited to cause a buffer overflow.
* Integer overflow error in the analysis of "STRF" piece in AVI files can be exploited to cause a buffer overflow.
Successful exploitation of the vulnerability allows execution of arbitrary code, Secunia said in an opinion.
The vulnerabilities are confirmed in version 1.1.10. Previous versions may also be affected.
Tidak ada komentar:
Posting Komentar