Email: Password: Remember Me | Create Account (Free)

Back to Subject List

Old thread has been locked -- no new posts accepted in this thread
???
01/10/06 23:06
Read: times


 
#107007 - Windows Meta File Vulnerability
Hi Everybody,

I don't know how many of you were aware of the WMF (Windows Meta File) vulnerability that some hackers had recently discovered, but it made the news in some outlets over the last few weeks. It seemed that there was a way that hackers could execute code on a remote system just by displaying a graphic image that had been encoded to exploit the vulnerability. It affected all versions of Windows going back to the early nineties, and unlike previous vulnerabilities it did not require that you click on a link or open an infected email. All you had to do was go to a website with a maliciously encoded graphic, or even see one in the preview pane of your email software (Outlook Express), and you were hit. And to make matters worse, hackers were writing and sharing the code to do this while Microsoft was still trying to figure out how to fix it.

Well the good news is that Microsoft has come up with the fix and it is included in this month's (January's) update. If you haven't done so already, you might want to go now and get the update (assuming you use Windows). It's at the following URL; http://windowsupdate.microsoft.com/


List of 11 messages in thread
TopicAuthorDate
Windows Meta File Vulnerability            01/01/70 00:00      
   tried to go there            01/01/70 00:00      
      It probably hits all email programs            01/01/70 00:00      
         Windows only            01/01/70 00:00      
            Ouch            01/01/70 00:00      
               Apparently            01/01/70 00:00      
                  Such As?            01/01/70 00:00      
                     One Example            01/01/70 00:00      
                     Not my kink            01/01/70 00:00      
                        SwitcherCAD            01/01/70 00:00      
            IE under WINE            01/01/70 00:00      

Back to Subject List