??? 01/10/06 23:06 Read: times |
#107007 - Windows Meta File Vulnerability |
Hi Everybody,
I don't know how many of you were aware of the WMF (Windows Meta File) vulnerability that some hackers had recently discovered, but it made the news in some outlets over the last few weeks. It seemed that there was a way that hackers could execute code on a remote system just by displaying a graphic image that had been encoded to exploit the vulnerability. It affected all versions of Windows going back to the early nineties, and unlike previous vulnerabilities it did not require that you click on a link or open an infected email. All you had to do was go to a website with a maliciously encoded graphic, or even see one in the preview pane of your email software (Outlook Express), and you were hit. And to make matters worse, hackers were writing and sharing the code to do this while Microsoft was still trying to figure out how to fix it. Well the good news is that Microsoft has come up with the fix and it is included in this month's (January's) update. If you haven't done so already, you might want to go now and get the update (assuming you use Windows). It's at the following URL; http://windowsupdate.microsoft.com/ |
Topic | Author | Date |
Windows Meta File Vulnerability | 01/01/70 00:00 | |
tried to go there | 01/01/70 00:00 | |
It probably hits all email programs | 01/01/70 00:00 | |
Windows only | 01/01/70 00:00 | |
Ouch | 01/01/70 00:00 | |
Apparently | 01/01/70 00:00 | |
Such As? | 01/01/70 00:00 | |
One Example | 01/01/70 00:00 | |
Not my kink | 01/01/70 00:00 | |
SwitcherCAD | 01/01/70 00:00 | |
IE under WINE | 01/01/70 00:00 |