zonda Posted January 16, 2006 Share Posted January 16, 2006 Taken off another site: Microsoft Releases WMF Exploit Fix - Comments (14) posted by [myg0t]OldManPeterson on Thursday, January 5 @ 7:36 PM Not our normal news, but important news, in my opinion. A vulnerability has been discovered in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to an error in the handling of Windows Metafile files (".wmf") containing specially crafted SETABORTPROC "Escape" records. Such records allow arbitrary user-defined function to be executed when the rendering of a WMF file fails. This can be exploited to execute arbitrary code by tricking a user into opening a malicious ".wmf" file in "Windows Picture and Fax Viewer" or previewing a malicious ".wmf" file in explorer (i.e. opening a folder containing a malicious image file). The vulnerability can also be exploited automatically when a user visits a malicious web site using Microsoft Internet Explorer. NOTE: Exploit code is publicly available. This is being exploited in the wild. The vulnerability can also be triggered from explorer if the malicious file has been saved to a folder and renamed to other image file extensions like ".jpg", ".gif, ".tif", and ".png" etc. Surprisingly Microsoft has released the patch earlier then they first said, just now in fact. So it's HIGHLY recommended you update your Windows to fix this critical flaw now. More info on the flaw and patch can be found here: http://www.microsoft.com/technet/securi ... 6-001.mspx So.... look out for some of those PK videos, eh? ... Link to comment Share on other sites More sharing options...
weezcake Posted January 16, 2006 Share Posted January 16, 2006 The fix has been out for at least a week now. :) ==================================Retired tip.it moderator.Teaching and inspiring. Link to comment Share on other sites More sharing options...
Blackthought Posted January 16, 2006 Share Posted January 16, 2006 i know this is off topic BUT ANOTHER LP FAN no wonder ur mod :P Link to comment Share on other sites More sharing options...
Mercifull Posted January 16, 2006 Share Posted January 16, 2006 Thanks Zonda but this exlpoit is almost a month old now and the patch has been around for almost 2 weeks. Mercifull <3 Suzi "We don't want players to be able to buy their way to success in RuneScape. If we let players start doing this, it devalues RuneScape for others. We feel your status in real-life shouldn't affect your ability to be successful in RuneScape" Jagex 01/04/01 - 02/03/12 Link to comment Share on other sites More sharing options...
Hannibal Posted January 16, 2006 Share Posted January 16, 2006 And we just had an announcement up on the relevant thread, 11 days after another admin had already posted the fact that the patch was out. Is it that hard to check sources? To actually read the post you quoted? Or the technet page it links? Geesh. Link to comment Share on other sites More sharing options...
Vape Posted January 16, 2006 Share Posted January 16, 2006 Yeah I was like.. "why on earth are they making another announcement?" Where the bloody hell are you? Link to comment Share on other sites More sharing options...
zonda Posted January 16, 2006 Author Share Posted January 16, 2006 eh, well now I feel stupid. Thanks guys :wink: But at least it is a reminder for those lazy kids to update windows in a regular basis!!! WARNING: NEW EXPLOIT INTERWEBNET RELEAZED!! DUN CLIK NOTING OR YOU COMPUTR GETS NUKULERLY FRIEDD Edit: hannibal, shut the hell up, I am sure you have NEVER made a mistake in your entire life, give me a break and keep it to yourself, thanks. weezcake, lefty as in marxism? leninism? communism? I myself prefere leninism, which is more or less socialism and communism mixed... but no government will ever be perfect due to human nature. ... Link to comment Share on other sites More sharing options...
weezcake Posted January 16, 2006 Share Posted January 16, 2006 Well I'm in the middle between the moderates and communists.. I'm a socialist :) It's more of Lenin than Marx; Marx is too radical for me. ==================================Retired tip.it moderator.Teaching and inspiring. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now