Skip to main content

Subtitles hack can control your system through media player vulnerabilities

Hacked in Translation Demo
Researchers at Check Point Security Labs have uncovered a nasty new hacking technique that takes advantage security deficiencies in several popular media players. The exploit uses phony subtitle files to breach a user’s defenses, at which point it’s possible to gain complete control over the system.

Hackers can apparently create malicious subtitle files that run code when they’re loaded into a media player, according to the report published by Check Point. The company estimates that hundreds of millions of users running software like VLC, Kodi, Popcorn Time, and Stremio could be at risk.

Subtitle files are generally perceived as being harmless, and as such they’re rarely vetted too stringently by media players or antivirus software. The situation is made worse by the fact that there’s little standardization, with over 25 different formats with different features and capabilities currently in use.

Check Point has also determined that subtitle repositories are being manipulated to help distribute the malicious files to users. Subtitles submitted by attackers are having are being boosted in the rankings, making it more likely that they’ll be downloaded by users, and selected by media players that can download such files automatically.

Having discovered these vulnerabilities, Check Point disclosed the problem to the developers responsible for the media players that were tested. Some had already taken steps to address the issues, while others are still looking into the situation. As of the time of writing, VLC and Stremio have been officially updated with a fix, while a fixed version of Popcorn Time is available here, and a fixed source code release of Kodi is available here. There are still concerns that other media players might also be affected.

The key here is that subtitle files are being exploited because they’re widely considered to be innocuous. As soon as users and developers drop their guard, malicious hackers see their window of opportunity — and that’s why the work done by organizations like Check Point is so important.

Editors' Recommendations

Brad Jones
Brad is an English-born writer currently splitting his time between Edinburgh and Pennsylvania. You can find him on Twitter…
Best Chromebook deals: Get a new laptop for just $169
The new Lenovo Chromebook Duet 5 sitting on a desk.

Chromebooks are more than just budget alternatives to Windows-based laptop deals. These Chrome OS-powered devices offer quick boot times, excellent productivity support, and full access to the Google Play Store, so they're perfect for those who need a mobile workstation. They range from ultra cheap options that still provide smooth performance because of the reliance on cloud-based apps instead of installed software, to more powerful and stylish machines that maximize the operating system's capabilities. You can also enjoy significant savings if you're patient enough to search for the best Chromebook deals.

There's no shortage of offers from retailers that involve Chromebooks, but since they're in high demand, it's  recommended that you proceed with the purchase immediately if something catches your eye. To help you out, we've rounded up some of the best Chromebook deals that you can shop right now -- surely one of these will meet your needs and budget.
Today's best Chromebook deals
Acer Chromebook 314 -- $169, was $269

Read more
Best laptop deals: Get a new laptop for work or play from $169
ifa 2019 acer announces new line of chromebooks chromebook 314 cb314 1h 1ht 08

A new laptop can be an important investment, so you want to be sure you get the right laptop for your needs and the right laptop for your budget. There’s no single laptop that perfectly accommodates everyone, which is why we’ve rounded up details on several laptops among the best laptop deals currently available. From Apple laptops to PCs and from large laptops to Chromebooks, we’ve got everything you need to know to save on a laptop that works for you.
Acer Chromebook 314 — $169, was $269

The Acer Chromebook 314 is a great Chromebook made to suit the computing needs of just about anyone. It’s great in a tight spot like a classroom or a coffee shop, as it’s super light and fits in just about any bag or backpack. But it’s also a great device for settling in with at a desk and diving into hours of office work. It comes with an Intel processor and a 14-inch Full HD touchscreen display, and even when you’re pushing it to the brink of its capabilities the Chromebook 314 is able to sustain all-day battery life. Like all of the best student Chromebooks, the Acer Chromebook 314 is an impressive device that combines computing capability with affordability.

Read more
How to clean a laptop fan
Cleaning a laptop fan with air blower.

Let's face it: Laptops get dirty. That's true on the exterior, where sweat and grime can accumulate. The good thing is, is that it's obvious when a proper cleaning is in order. But what about inside a laptop? That gets dirty as well, as a laptop's thermal system works to pull air in to keep things cooled down. Inevitably, dust and other particles get sucked inside and accumulate around the fans.

Read more