WMF exploit summary

Written by t-readyroc

Wednesday, 04 January 2006

In case you're living under a rock, in a cave, in outer-Slobovia, there's a new Windows vulnerability that's getting everyone's attention these last couple days. The WMF (Windows Meta File) vulnerability has already rode the virus-writing circuit, & there are a number of exploits floating around, including an MSN messenger worm. The thing that's notable here is that not only is the vulnerability pretty serious, MS has said it's not releasing a patch until next Tuesday. This has led a couple of security firms to push the use of a third party patch until the official one is released next week. This, of course, ain't cool with the Redmond boys, but in cases like these, better safe than sorry, I guess; especially if your company's dealing with sensitive information. The vulnerability's seriousness is due to the fact that since the virii are riding in on image files (like jpeg's & bitmap's), very few IDS's & anti-virus apps can catch them.

 

< Prev		Next >

AntiBlogger