Nasty Windows Exploit

[Dynamoo]

Tweet

This is *nasty* - a flaw in the WMF graphics file format that can lead to code being executed on your PC.. there's no patch and it's quite likely that your anti-virus vendor doesn't have a fix for it.

The evil thing is that WMF files can be embedded in most types of email message, i.e. it does NOT have to be an attachment. You can get infected just by viewing the graphic in a preview pane.

Web browsers are vulnerable too, and most likely Firefox and Mozilla.

http://www.f-secure.com/weblog/ (this tells you some sites to block)
http://isc.sans.org/ has the latest news (Infocon is set to Yellow which means this is a serious threat)

[Lee_Owen]

In the windows 2 patch it automatically bars images from view in outlook unless you enable them. Will this stop it?

[pricethat]

How cool, that means i can make lots of nasty little bugs to take control of everyones machine and stuff their browsers with 100s of cookies each day from the worlds top merchants.

And no one can stop me because i thought of it first.... ah ****, that was 180 solutions......damnit

[Dynamoo]

Microsoft have a workaround here: http://www.microsoft.com/technet/sec...ry/912840.mspx